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Abstract 

In  1933  Godel  ([16])  introduced  a  modal  logic  of  provability  (iSl)  but  left  it  without 
an  intended  mathematical  model.  In  [17]  Godel  suggested  the  format  “t  is  a  proof  of 
{t:F)  to  understand  Si,  This  suggestion  is  realized  in  the  Logic  of  Proofs  (jCP)  presented 
in  this  paper.  In  CP,  proofs  are  internalized  as  terms.  Three  operators  application  (♦), 
choice  (-h),  and  proof  checker  (!)  are  used  to  construct  terms  called  proof  polynomials  from 
atomic  terms.  jCP  enables  iteration  of  the  internalization  of  proofs  as  terms  thus  allowing 
formulas  t  :F  for  any  proof  polynomial  t  and  any  formula  F. 

In  this  paper  we  present  a  finite  axiomatization  of  CP  in  Hilbert,  Gentzen  and  natural 
deduction  systems  and  prove  normalization  theorems.  Three  completeness  properties  of 
CP  are  established:  i)  proof  polynomials  represent  all  operations  on  proofs  invariant  with 
respect  to  the  proof  system  chosen;  ii)  CP  is  sound  and  complete  with  respect  to  the 
provability  semantics;  iii)  CP  is  able  to  realize  any  derivation  in  Si  by  recovering  proof 
polynomials  for  all  occurrences  of  modality  in  a  given  »9I-derivation.  Thus  CP  gives  an 
intended  semantics  for  the  G6del‘s  logic  of  provability  Si. 

Logic  of  Proofs  is  the  underlying  structure  for  intuitionistic  logic,  some  modal,  epis- 
temic  logics,  and  typed  lambda  calculi.  In  particular,  the  basic  CP  propositions  t  :  F 
also  can  be  interpreted  as  ^^X-term  t  of  type  F^ .  Following  Curry-Howard  we  represent  a 
A-term  t :  F  with  free  variables  {x\ :  Ai, . . . ,  :  An}  by  a  natural  deduction  in  CP  of  the 

form  xi :  Ai, . .  .,x„  :  An  t  :F.  CP  includes  the  A-calculi  corresponding  to  intuitionistic 
and  modal  logics..  In  addition  CP  admits  A-terms  of  the  form  p:{t  :  F)  and  in  general 
allows  arbitrary  combinations  of  and  propositional  connectives.  CP  can  also  be  seen 
as  a  typing  system  for  non-deterministic  A-calculi  since  t :  F  and  t :  G  are  allowed  in  CP 
for  different  F  and  G.  Proof  polynomials  provide  a  unified  semantics  for  modalities  and 
A-terms.  Such  a  unified  semantics  allows  us  to  consider  both  modalities  and  A-terms  as 
objects  of  the  same  nature. 

‘Center  for  Foundations  of  Intelligent  Systems,  Rhodes  H2dl  625,  Cornell  University,  Ithaca  NY,  14853 
email: artemovChybrid.comell.edu.  Research  supported  by  the  ARO  under  the  MURI  program  “Integrated 
Approach  to  Intelligent  Systems”,  grant  number  DAA  H04-96- 1-0341. 
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1  Introduction  to  Logic  of  Proofs 

In  1932  Kolmogorov  ([20])  suggested  to  understand  (propositional)  intuitionistic  logic  Xnt  as 
a  calculus  of  problems  in  classical  mathematics.  Kolmogorov  gave  a  detailed  but  informal 
description  of  his  interpretation.  In  1933  Godel  ([16])  derived  Int  from  the  classical  notion  of 
proof  which  may  be  regarded  a  special  case  of  Kolmogorov’s  problem  solution.  Godel  reduced 
Int  to  the  classical  modal  logic  of  provability  «S4,  which  has  as  axioms  all  classical  tautologies  in 
the  modal  propositional  language  along  with  the  principles  OF-^F,  □(F->-G)  (DF-^DG), 

OF  -y  OOF,  and  rules  modus  ponens  F  -4  G,  F  I-  G  and  necessitation  F  I-  OF.  However, 
Godel  did  not  give  a  precise  provability  model  for  <S4  itself.  Kleene  realizability  [19],  Medvedev 
finite  problems  [29]  (cf.  [44],  [12])  provide  readings  of  Int  as  a  logic  of  classical  problems,  but 
neither  of  these  models  specify  Int  exactly. 

Another  problem  arose  from  Godel’s  paper  [16]:  to  find  an  interpretation  of  provability, 
which  complies  with  <S1.  The  issue  of  a  provability  model  for  <S4  attracted  the  attention 
of  Kripke  [22],  Montague  [34],  Myhill  [35],[36],  Lemmon  [25],  Mints  [31],  Kuznetsov  [24], 
Goldblatt  [18],  Boolos  [8], [9]  Shapiro  [39], [39],  Buss  [11],  and  many  other  logicians.  None  of 
the  semantics  suggested  serve  as  a  faithful  provability  model  for  «51.  Some  of  them  do  not 
treat  the  <S4  modality  as  a  provability  operator  (e.g.  [22]),  some  capture  only  a  fragment  of 
«S4  (e.g.  [25]).  Semantics  from  [24],  [18],  [8],  [9]  capture  some  non-54  formulas  (e.g.  so-called 
Grzegorcsyk  scheme)  that  are  not  plausible  as  the  principles  of  the  Provability. 

A  principal  difficulty  here  is  caused  by  the  reflexivity  principle  OF— >-F  of  «S4,  which  along 
with  the  necessitation  rule  F  1-  OF  contradicts  the  Second  Godel  Incompleteness  Theorem 
(SGII).  Indeed,  a  straightforward  interpretation  of  DF  as 

“F  is  provable  in  a  formal  system  T" 

leads  to  logics  of  formal  provability  incompatible  with  54  (cf.[8],[9]).  For  example,  a  reflexivity 
principle  DF-^F  under  an  interpretation  F  =  AtvedgenA)  and  □  as  a  provability  within  T 
becomes  a  statement  Consis  T,  expressing  the  consistency  of  T.  A  theorem  of  54  □(□F— J-F) 
thus  expresses  an  assertion  that  Consis  T  is  provable  in  T,  which  contradicts  SGIT. 

The  following  analysis  explains  this  paradoxical  behavior.  The  arithmetical  formula  of 
provability  Provable  (F)  for  F  is  provable  in  T  has  the  form 

“there  exists  a  number  x  which  is  the  code  of  a  proof  of  F" . 

In  a  given  model  of  first  order  arithmetic  such  an  x  may  be  nonstandard.  In  particular,  it 
would  mean  that  Provable  {F)  is  true,  but  there  is  no  “real”  T-derivation  behind  such  an  x. 
So,  Provable{F)  is  weaker  than  the  intended  “F  is  provable”.  Hence 

Provable{F)  F 


is  stronger,  than  the  intended 

“if  F  is  provable,  then  F” . 
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This  consideration  suggests  eliminating  the  existential  quantifiers  and  replacing  them  by  ex¬ 
plicit  operations  on  proofs.  Where  should  these  operations  come  from?  The  proof  of  SGIT 
says  more  about  Provability  than  □  is  able  to  express.  For  example,  the  usual  distributivity 
formula 

n{F^G)  -¥  {OF^DG) 

is  a  “forgetful”  version  of 

“given  proofs  s  and  t  of  F  G  and  F  respectively  m(s,t)  is  a  proof  of  G,  where 
m{x,y)  is  a  specific  computable  function  built  from  the  description  of  a  proof  sys¬ 
tem” 

A  similar  decoding  can  be  done  for  OF  -¥  DDF: 

“for  some  specific  function  c(x)  given  a  proof  t  of  F  c(t)  returns  a  proof  that  t  is 
a  proof  of  F”  . 

In  his  Lecture  at  Zilsel’s  ([17],  cf.  [37]))  in  1938  (published  in  1995)  Godel  sketched  a 
constructive  version  of  «S4  in  which  t  is  a  proof  of  F  {t :  F)  replaced  the  <S1  assertion  F  is 
provable  (OF).  Godel’s  system  of  1938  justifies  the  reflexivity  principle,  its  propositional  part 
admits  an  exact  provability  interpretation.  However,  the  question  of  finding  a  complete  set  of 
axioms  for  a  logic  of  proofs,  as  well  as  the  question  about  its  ability  to  realize  the  entire  <S4 
remained  unanswered. 

In  this  paper  we  realize  Godel’s  suggestion  of  1938^  and  find  a  complete  system  for  the 
logic  of  proofs.  This  yields  a  positive  solution  to  the  problem  of  faithful  provability  semantics 
for  Godel’s  provability  logic  of  1933,  which  in  turn  proves  Kolmogorov’s  conjecture  of  1932 
that  intuitionistic  logic  Int  is  nothing  but  a  logic  of  proofs  (“problem  solutions”)  for  systems 
based  on  classical  logic. 

1.1  Definition.  The  language  of  Logic  of  Proofs  {CP)  contains 

the  usual  language  of  classical  propositional  logic 
proof  variables  xq,  . .  .,Xn,  ■  ■  proof  constants  oq,  . . . ,  On, . . . 
functional  symbols;  monadic  !,  binary  •  and  -b 
operator  symbol  of  the  type  “term  :  formula” . 

We  will  use  a,b,c,.. .  for  proof  constants,  and  u,  v,  w,  x,y,z,...  for  proof  variables.  Terms  are 
defined  by  the  grammar 

p::=  Xi  I  ai  \  \p\pi-p2  \pi+P2 

^The  Logic  of  Proofs  £P  was  found  by  the  author  independently  of  Godel’s  paper  [17].  The  first  presentations 
of  £P  took  place  at  the  author’s  t^Jks  at  the  conferences  in  Munster  and  Amsterdam  in  1994.  Preliminary 
versions  of  some  of  the  results  of  this  paper  appeared  in  Technical  Reports  [4]  and  [5]. 
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We  call  these  terms  proof  polynomials  and  denote  them  by  p,r,Sjt. . ..  By  analogy  we  refer  to 
constants  as  coefficients.  Constants  correspond  to  proofs  of  a  finite  fixed  set  of  propositional 
schemas.  We  will  also  omit  •  whenever  it  is  safe.  We  also  assume  that  (a  •  6  •  c),  (a  •  6  •  c  •  d), 
etc.  should  be  read  as  ((a  •  6)  •  c),  (((a  •  6)  •  c)  •  d),  etc. 

Using  t  to  stand  for  any  term  and  S  for  any  propositional  letter,  the  formulas  are  defined 
by  the  grammar 

(T  ::=  S  \  (Ti—^(T2  \  o-iA(T2  |  (TiVa2  |  -^cr  |  t:a 

We  will  use  A^B^C^F^G^H^X^Y^Z  for  the  formulas  in  this  language,  and  F,  A, ...  for  the 
finite  sets  (also  finite  multisets,  or  finite  lists)  of  formulas  unless  otherwise  explicitly  stated. 
We  will  also  use  x ,  y,  z, . . .  and  p,  r,  s, . . .  for  vectors  of  proof  variables  and  proof  polynomials 
respectively.  If  s  =  {^i, . . .,  5n}  and  F  =  {Fi, . . ., F^},  then  s:T  denotes  {^i  :Fi, . . ., 5^ :Fn}, 
VF  =  FiV  ...V  Fyi,  ^F  =  FiA  ...  A  Ffi. 

We  assume  the  following  precedences  from  highest  to  lowest: 

M  *?  +i  b  A,  V,  . 


The  intended  semantics  for  p:F  is 


p  is  a  proof  of  F, 

which  will  be  formalized  in  the  next  section.  Note  that  a  proof  p  is  not  necessarily  deter¬ 
ministic,  i.e.  p  may  be  a  proof  of  several  different  F‘s.  The  differences  between  deterministic 
and  nondeterministic  proofs  are  mostly  cosmetic.  The  same  proof  may  be  easily  considered 
as  deterministic,  e.g.  as  a  proof  of  the  end  formula  of  the  proof  tree,  and  as  nondeterministic, 
say  as  a  proof  of  all  intermediate  formulas  derived  within  this  proof.  In  an  abstract  setting 
every  nondeterministic  proof  system  can  be  made  deterministic  by  changing  from 

"p  proves  Fi, . . .,  F^^  to  “(Pfi)  proves  Fi,  i  =  1, . ,  .n^. 

Moreover,  every  deterministic  proof  system  may  be  regarded  as  nondeterministic  by  reading 

^^p  proves  Fi  A  . . .  AFn  ^  as  ^^p  proves  each  of  Fi^  i  =  1, . . .  n 

The  logic  of  strictly  deterministic  proof  systems  was  discussed  in  [2],  [3],  [23],  where  it  meets 
a  complete  axiomatization.  Such  logic  is  considerably  more  complicated  than  CP.  It  lacks 
some  natural  closure  properties  and  it  is  not  able  to  realize  any  modal  logic,  in  particular 
Si.  The  situation  here  resembles  that  with  the  definition  of  the  computable  functions.  Total 
computable  functions  (as  well  as  deterministic  proof  systems)  may  look  more  desirable  than 
general  computable  functions  (as  well  as  general  proof  systems  without  discrimination  on  the 
basis  of  determinisity).  However,  a  separate  theory  of  total  computable  functions  lacks  the 
elegance  and  some  important  closure  properties  of  the  theory  of  general  computability. 
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The  system  CPq.  Axioms: 

AO.  Axioms  of  classical  propositional  logic  in  the  language  of  CP 
Al.  t:F  -V  F 

A2.t:{F^G)  {s:F  {t-s):G) 

AS.  t:F  \t:{t:F) 

Af.  SI F  — ^  : F f  t'.F  — ^  (sTt)  '.F 

Rule  of  inference: 

rf-F-^G  ri-F 

Rl.  ThG 

The  system  CP  is  CPq  plus  the  rule 


“verification” 
“application” 
“proof  checker” 
“choice” 


“modus  ponens”. 


R2.  if  A  is  an  axiom  AO  -  Af,  and  c  a  proof  constant,  then  h  c:  A  “necessitation” 

Proof  constants  in  CP  stand  for  proofs  of  “simple  facts”,  namely  propositional  axioms 
and  axioms  Al  -  Af.  We  define  a  Constant  Specification  (CS)  to  be  a  finite  set  of  formulas 
Cl :  Al, . . . ,  c„ :  A„  such  that  c,-  is  a  constant,  and  F,  an  axiom  AO  -  Af.  Each  derivation  in 
CP  naturally  generates  a  CS  consisting  of  all  formulas  introduced  in  this  derivation  by  the 
necessitation  rule. 

Note  that  both  CPq  and  CP  enjoy  the  deduction  theorem  and  the  substitution  lemma:  If 
r(a;,  P)  h  B{x,P)  for  a  propositional  variable  P  and  a  proof  variable  x,  then  for  any  proof 
polynomial  t  and  any  formula  F 


r{x/t,P/F)\-  B{x/t,P/F). 

For  a  given  constant  specification  CS  under  £PpS)  we  mean  CPq  plus  CS.  Obviously, 

F  is  derivable  in  CP  with  a  constant  specification  CS  •<=>  CPipS)  h  F  <=>•  CPq  ^CS  F. 

Operations  and  “!”  may  work  on  deterministic  as  well  as  on  non-deterministic  proofs.  In 

turn,  “+”  is  a  strictly  non-deterministic  operation.  Indeed,  by  Af  we  have  s:  F  At  :G  — > 
{s+t):F  A  {s+t):G,  thus  s  +  t  proves  different  formulas.  In  principle,  there  is  no  restriction 
on  the  choice  of  a  constant  c  in  R2.  In  particular,  R2  allows  to  introduce  a  formula  c :  A(c) , 
or  to  specify  a  constant  several  times  as  a  proof  of  different  axioms  from  AO  -  Af.  One  might 
restrict  £P  to  injective  constant  specifications  only,  i.e.  only  allowing  each  constant  to  serve  as 
a  proof  of  a  single  axiom  A  within  a  given  derivation  (although  allowing  constructions  c :  A  (c) , 
as  before).  Such  a  restriction  would  not  change  the  ability  of  CP  to  emulate  classical  modal 
logic,  or  the  functional  and  arithmetical  completeness  theorems  for  CP,  though  it  will  provoke 
an  excessive  renaming  of  the  constants.  We  choose  not  to  put  the  injectivity  restriction  on 
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CP\  derivations  with  injective  GS’s  lack  some  natural  closure  properties,  e.g.  it  might  be  the 
case  that  t-  F  and  h  G  but  not  h  F  A  G.  Since  proof  polynomials  denote  nondeterministic 
proofs  it  seems  natural  that  the  proof  constants  should  be  non-deterministic  too.  One  cannot 
a  priori  assign  a  constant  to  a  given  axiom  from  A1  -  A4  for  all  derivations  in  €P:  such 
derivations  are  not  closed  under  substitution. 

No  single  operator  H  :  ”  in  >CP  is  a  normal  modality  since  none  of  them  satisfies  the 
property  t:{P-^Q)  {t:P  The  usual  Kripke  semantics  for  modal  logics  does  not 

work  for  the  Logic  of  Proofs.  These  make  JCP  fundamentally  different  from  numerous  multi 
modal  logics,  e.g.  the  dynamic  logic  of  programs  ([21]),  where  the  modality  is  upgraded  by 
some  additional  features.  In  turn,  in  the  Logic  of  Proofs  the  modality  is  decomposed  into  a 
family  of  proof  polynomials:  <S4  is  a  forgetful  projection  of  JCP  (see  Section  6) 


Logic  of  Proofs 


decomposition 


Modal  Logic 


polymodal  logics 


dynamic  logic  of  programs 


logics  of  knowledge 


Godel’s  sketch  of  the  logic  of  proofs  from  [17]  lacks  ‘‘+”,  without  which  a  realization  of  <S4 
cannot  be  completed. 

Gabbay‘s  Labelled  Deductive  Systems  {LDS)  may  also  be  regarded  as  a  natural  framework 
for  the  Logic  of  Proofs  [14].  One  of  the  original  motivations  of  LDS  was  to  elaborate  a  proof 
interpretation  of  atoms  t :  F,  In  the  area  of  epistemic  logics  a  desire  to  have  a  knowledge 
supporting  system  with  justifications  in  the  format  t  :F  was  expressed  in  [6].  The  Logic  of 
Proofs  may  be  regarded  as  a  basic  epistemic  logic  with  explicit  justifications.  Intuitionistic 
Type  Theory  by  Martin- Lof  [27],  [28]  also  makes  use  of  the  format  t  :  F  with  its  informal 
provability  reading. 

Terms  of  typed  combinatory  logic  (cf.  [45])  may  be  regarded  as  proof  polynomials  in  a 
fragment  of  CP  with  — )•  and  •  only.  To  some  extend  CP  as  it  is  presented  in  this  paper  may 
be  regarded  as  a  combinatory  logic  system  with  nondeterministic  assignments  of  terms  to 
types  and  capacities  to  internalize  its  own  derivations  as  combinatory  terms.  Of  course,  the 
solid  provability  semantics  remains  the  main  distinction  oi  CP.  In  principle  one  might  rewrite 
CP  as  a  A-term  system  without  proof  constants  but  with  a  corresponding  set  of  atomic  A- 
terms.  In  a  term  calculi  language  such  rewriting  would  mean  a  transition  from  a  combinatory 
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term  system  to  a  A-term  system  of  the  same  strength.  From  the  logic  point  of  view  such 
rewriting  would  mean  a  change  from  Hilbert  style  proofs  as  a  source  for  proof  polynomials 
into  equivalent  natural  deduction  ones  with  a  bunch  of  new  rules  instead.  In  this  paper  we 
choose  the  language  of  proof  polynomials  which  looks  equally  close  to  (or  equally  distant 
from)  the  two  major  applications  of  CP:  modal  logic  and  A-calculus. 

Among  the  related  works  there  are  [23],  [41]  and  [33]  all  based  on  the  system  CP  zs  it  was 
presented  in  [4].  The  paper  [23]  gives  a  complete  axiomatization  of  the  logic  of  deterministic 
proof  systems  (i.e.  the  ones  where  any  proof  proves  exactly  one  theorem).  The  paper  [41] 
finds  a  complete  axiomatization  of  a  joint  logic  of  proofs  and  formal  provability.  In  [33]  the 
decidability  of  the  entire  CP  was  first  established. 

1.2  Lemma.  (Lifting  Lemma)  Let 


s;r,AI-£p  F, 

and  let  V  be  a  corresponding  derivation.  Then  one  can  construct  a  proof  polynomial  t{x^^ 
such  that 

s:r,y:AI-£p  t{s,y):F. 


Moreover,  if 


Ah^  F, 

then  one  can  construct  t{y)  which  is  a  product  of  proof  constants  and  variables  from  y  such 
that 


y:A  y-£p  t{^:F. 


Proof.  By  induction  on  the  derivation  siF,  A  I-  F.  If  F  =  s,-  :G,-  6  s:r,  then  put  t  :=!si 
and  use  A3.  If  F  =  Dj  €  A,  then  put  t  :=  yj.  If  F  is  an  axiom  AO  -  A4,  then  pick  a  fresh 
proof  constant  c  and  put  t  :=  c;  by  R2,  F  h  c :  F.  Let  F  be  introduced  by  modus  ponens 
from  G  -¥  F  and  G.  Then,  by  the  induction  hypothesis,  there  are  proof  polynomials  u{s,y) 
and  v{s,^  such  that  ti:(G  ->  F)  and  v:G  are  both  derivable  in  CP  from  srF, y:A.  By  Al, 
s:T,y:A  f-  (tiu)  :F,  and  we  put  t  :=  uv.  If  F  is  introduced  by  R2,  then  F  =  c:  A  for  some 
axiom  A.  Use  the  same  R2  followed  by  A 5:  c:A  —^!c : c :  A,  to  get  s : F,  y :  A  hlc ; F,  and  put 
t  :=!c. 

◄ 

It  is  easy  to  see  from  the  proof  that  the  lifting  polynomial  t{s,  y)  is  nothing  but  a  blueprint 
of  a  given  derivation  s:F,  A  t-  F.  Thus  CP  accommodates  its  own  proofs  as  proof  terms.  The 
necessitation  rule 
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\-  F  \-  p:F  for  some  proof  polynomial  p, 


where  p  is  a  blueprint  of  the  proof  t-  F  is  a  special  case  of  Lifting.  As  we  can  see  in  Section 
6  CP  suffices  to  emulate  all  derivations  of 

1.3  Example.  <S4  h  (OA  A  DB)  — )■  □(AaB) 

In  CP  the  corresponding  derivation  is 

1.  A,B  h  AAjB,  by  propositional  logic 

2.  x:A,y:B\-  t{x,y):{AAB),  by  Lifting 

3.  h  a; :  A  Ay:  B  -¥  t{x,  y) :  (A  A  B) ,  from  2. 


1.4  Example.  «S4  h  (DAN/nB)  ^  □(AVB). 

In  CP  the  corresponding  derivation  is 

1.  A-^AVB,  B-^AyB 

2.  o:  (A  A  V  B),  6 :  (B  ->  A  V  B),  by  necessitation, 

3.  ®:A  -4  (o-x):(AvB),from  2  by  A2 

4.  y:B  -4  (6'y):(AvB),  from  2  by  A2 

5.  ax:(AvB)  — »•  {ax+by):{A\/B), 

6j/ :  (A  V  B)  -4  {ax +by) :  (A  V  B) ,  by  A4 

6.  (x:A  V  y:B)  ^  (ax+6y) :  (AVB) 


2  Standcird  provability  interpretation  of  CP 

The  Logic  of  Proofs  is  meant  to  play  for  a  notion  of  proof  a  role  similar  to  that  played  by 
the  boolean  propositional  logic  for  the  notion  of  statement.  In  particular,  CP  enjoys  the 
soundness/completeness  property: 

CP  F  <=>  F  is  true  under  any  interpretation  . 

First  order  Peano  Arithmetic  PA  (cf.  [8],  [9],  [30],  [43])  is  a  natural  source  of  such  proof 
systems  with  Godel  numbers  of  proofs  being  a  natural  instrument  of  internalizing  proofs  as 
terms  (natural  numbers).  In  principle  any  system  of  proofs  with  a  proof  checker  operation 
capable  of  internalizing  its  own  proofs  as  terms  (cf.[42])  can  provide  a  model  for  CP.  So,  the 
soundness  (=^)  does  not  necessarily  refer  to  the  arithmetical  models  of  CP.  However,  PA  is 
convenient  for  establishing  the  completeness  (<=)  of  CP.  Indeed,  given  1/  F  it  suffices  to 
deliver  one  interpretation  that  makes  F  false.  It  turns  out  that  such  a  counterinterpretation 
can  always  be  chosen  from  a  class  of  proof  systems  for  PA. 
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Within  Sections  2  and  5  of  this  paper  under  Ai  and  Ei  we  mean  the  corresponding  classes 
of  arithmetical  predicates.  We  will  use  a, /3,  . . .  to  denote  arithmetical  formulas  unless 

stated  otherwise.  We  use  a  new  functional  symbol  iz(p[z)  for  each  arithmetical  formula  (f[z) 
and  assume  that  t-terms  could  be  eliminated  by  using  the  small  scope  convention  (cf.  [13]).  In 
particular,  we  assume  that  VA  contains  terms  for  all  primitive  recursive  functions  (cf.  [43]), 
called  primitive  recursive  terms.  Formulas  of  the  form  f{x)  =  0  where  f{x)  is  a  primitive 
recursive  term  are  standard  primitive  recursive  formulas,  A  standard  Si  formula  is  a  formula 
3x(p{x^  ^  where  (^(x,  ^  is  a  standard  primitive  recursive  formula.  An  arithmetical  formula  (p 
is  provably  Si  if  it  is  provably  equivalent  in  VA  to  a  standard  Si  formula;  (p  is  provably  Ai 
iif  both  (p  and  --^(p  are  provably  Si.  The  term  iz(p{z)  is  called  computable  if  (p{z)  is  provably 
Si.  The  term  tzcp{z)  is  provably  totals  if  VA  proves  that  there  exists  a  unique  z  such  that 
(p{z),  A  closed  computable  term  is  a  computable  provably  total  term  LZ(p{z)  such  that  (p{z) 
contains  no  free  variables  other  than  z.  Closed  computable  terms  stand  for  all  computable 
^‘names’’  for  natural  numbers.  There  is  an  algorithm  which  for  any  closed  computable  term 
iz(p  calculates  its  value^  i.e.  a  natural  number  n  such  that  VA  h  tz(p  =  n.  A  set  of  computable 
terms  is  closed  under  substitution.  The  result  of  substituting  a  closed  computable  term  into 
a  Ai  formula  is  again  a  Ai  formula. 

A  proof  predicate  is  a  provably  Ai-formula  Pr/(x,  y)  such  that  for  all  (p 
VA  h  (p  for  some  nGo;  Prf{n^  holds. 

A  proof  predicate  Prf(Xjy)  is  normal  if 

1)  for  every  proof  k  the  set  T{k)  =  {I  \  Prf{kA)}  is  finite  and  the  function  T{k)  = 
the  code  ofT{k)  is  provably  computable, 

2)  for  every  finite  set  5  of  theorems  of  VA^  S  CT{k)  for  some  proof  k. 

For  every  normal  proof  predicate  Prf  there  are  provably  computable  terms  m(x,y),  a(x,y), 
c(x)  such  that  if  s,  t  are  closed  computable  terms,  then  m(s,  i),  a(5,  i),  are  again  closed 

computable  terms  and  for  all  arithmetical  formulas  (/?,  ^  the  following  formulas  are  valid: 

Prf{s,^(p-¥'ilj~^)  A  Prf{t^^(p'^)-^Prf{m{s^ 

Prf{s,  ^ip'^)^Prf{a{s,  Prf{t, '’ </?'')  Prf{a{s, 

Prfit,  ^<fi-^)^Prf{c{^n,^Prf{t, 

For  example,  m(x,  y)  is  a  natural  term  for  the  following  computable  function: 

If  for  some  (p^'ij)  both  Prf{x^^(p—>'i/)~^)  and  Prf{y,^(p^)  hold,  then  take  the  first  z 
such  that  Prf{Zj^(p~^)  and  let  m{x,y)  =  z. 

Similarly,  a(x,  y)  is  a  natural  term  for  the  computable  function 
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the  least  z  such  that  T{z)  D  T(x)  U  T(y). 

Finally,  c(x)  is  a  natural  term  for  the  computable  function: 

Given  x  recover  the  term  f  such  that  x  =  and  calculate  T{f).  Then  for  every 
(p  from  T{f)  compute  Itp  such  that  Prf{l(p,^Prf{f,''(p~')~')  (such  l(p  exists  since 
Prfif,^^-^)  is  a  true  Ai  formula,  therefore  provable  in  VA).  Take  the  first  y  such 
that  T{y)  D  {l(p  |  (p  €  T(f)}  and  let  c(a;)  =  y. 

We  assume  that  a  normal  proof  predicate  comes  with  its  own  fixed  choice  of  such  terms 
m{x,y),  a{x,y),  c(x).  Note,  that  the  natural  arithmetical  proof  predicate  PROOF(x,y) 

“x  is  the  code  of  a  derivation  containing  a  formula  with  the  code  y” . 

is  an  example  of  a  normal  proof  predicate. 

2.1  Definition.  An  arithmetical  interpretation  *  of  the  £P-language  has  the  following 
parameters: 

•  a  normal  proof  predicate  Prf  (with  the  terms  m{x,  y),  a{x,  y),  c{x)), 

•  an  evaluation  of  sentence  letters  by  sentences  of  arithmetic, 

•  and  an  evaluation  of  proof  letters  by  closed  recursive  terms. 

Let  *  commute  with  boolean  connectives,  {t-s)*  =  m{t*,  s*),  {t  -f  s)*  =  o(t*,  s*),  (!t)*  = 

c('”t*''),  {t:F)*  =  Prf{t*,''F*~').  Under  any  interpretation  *  a  proof  polynomial  t  becomes  a 
closed  computable  term  t* ,  an  >CP-formula  F  becomes  an  arithmetical  sentence  F* .  a  formula 
{t:F)*  is  always  provably  Ai.  Note,  that  VA  (as  well  as  any  theory  containing  certain  finite 
number  of  arithmetical  axioms,  e.g.  Robinson’s  arithmetic)  is  able  to  derive  any  true  Ai 
formula,  and  thus  to  derive  a  negation  of  any  false  Ai  formula  (cf.  [30]).  For  a  set  X  of 
£P-formulas  under  X*  we  mean  the  set  of  all  F*’s  such  that  F  £  X.  Given  a  constant 
specification  CS,  an  arithmetical  interpretation  *  is  a  CS -interpretation  if  all  formulas  from 
CS*  are  true  (equivalently,  are  provable  in  VA).  In  the  functional  completeness  theorem  below 
we  will  need  one  more  clause  of  the  definition  of  *:  (□F')*  =  3yPr/(y,  ‘"F*"').  An  >CP-formula 
F  is  valid  (with  respect  to  the  arithmetical  semantics)  if  the  arithmetical  formula  F*  is  true 
under  all  interpretations  *.  F  is  CS -valid  if  F*  is  true  under  all  GS-interpretations  *. 


2.2  Theorem.  (Arithmetical  soundness  of  CPq) 

1.  If  CPo  F  F  then  F  is  valid. 

2.  If  jCPo  F  F  then  VA  F  F*  for  any  interpretation  * ,  (strong  soundness) 
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Proof.  The  only  nontrivial  case  is  establishing  the  strong  soundness  of  axiom  Al\  tiF-^F. 
Let  *  be  an  arithmetical  interpretation,  then  (t:F  —¥  F)*  is  Prf{t*,^F*~^)  -¥  F*.  Consider 
two  possibilities.  Either  Prf{t*,''F*~')  is  true,  in  which  case  the  value  n  of  the  term  t*  is 
indeed  a  proof  of  F*,  thus  TA  I-  F*  and  VA  L  {t:F  -4-  F)*.  Otherwise  Prf  {t* F*~')  is  false, 
in  which  case  being  a  false  Ai  formula  it  is  refutable  in  P.4,  i.e.  VA  I — >Prf{t*,’'F*~')  and 
again  VA  h  (t:F  — >•  F)*. 

A 


2.3  Corollary.  (Arithmetical  soundness  of  JCV) 
If  jCVfpS)  H  F,  then  F  is  CS -valid. 


3  Functional  completeness  of  proof  polynomials 

In  this  section  we  show  functional  completeness  for  the  system  of  proof  polynomials  in  £P,  as 
another  justification  for  the  basic  set  of  operations  •, !,+.  the  results  in  this  section  are  not 
pertinent  to  the  rest  of  the  paper  so  the  reader  may  choose  to  skip  this  section. 

Operations  on  proofs  invariant  with  respect  to  the  choice  of  a  proof  system  naturally  arise 
from  the  notion  of  admissible  rule  in  arithmetic. 

3.1  Definition.  A  deterministic  admissible  rule  in  VA  is  a  figure 

hCl,...,hCn 

\-G 

where  Ci, . .  .,C'n, G  are  logical  formulas  such  that  for  every  interpretation  *,  G*  is  provable 
in  VA  whenever  are.  A  (non-deterministic)  admissible  rule  in  VA  (a.r.)  is  a 

rule  of  the  kind 

Cl  or  C2  or  ...  or  Cn 

Tg  ,  (2) 

where  every  C,-  is  a  usual  deterministic  premise  h  G/,...,l-  G"*.  The  meaning  of  (2)  is 
that  for  every  interpretation  *  G*  is  derivable  in  VA  whenever  for  some  i,  0  <  i  <  n, 
all  (G/)*, . . .,  (Cf’)*  are  derivable  in  VA.  Every  such  rule  may  be  regarded  as  an  implicit 
specification  of  a  proof  y  of  G  as  a  function  of  proofs  Xij ’s  of  Cf ’s.  Rule  (2)  is  a  propositional 
a.r.  in  a  proof  format  if  all  G|’s  and  G  are  formulas  in  the  language  of  CV.  A  propositional 
a.r.  in  a  proof  format  (2)  is  naturally  presented  by  a  valid  formula  in  the  language  of  £P 
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with  an  additional  operator  □  representing  an  implicit  existential  quantifier  over  proofs^: 


\J  (3) 

»  3 

We  call  such  a  formula  (3)  an  invariant  operation  on  proofs. 


3.2  Example.  Some  examples  of  invariant  operations  on  proofs: 

i)  x:(F^G)Ap:F  OG, 

ii)  x:F—i-Ox:F, 

Hi)  x:FAy:G O(FaG), 
iv)  x:F\/y:G 0{F\/G). 

For  each  of  these  examples  there  is  a  proof  polynomial  p  realizing  the  operator  □  in  such  a 
way  that  instantiating  p  inside  □  gives  a  formula  derivable  in  £P: 

i)  £Phx:(F->-G)Ay:F-y  (x-y):G, 

ii)  CP  \- x:F -¥\x:x:F, 

in)  CP\-  x:FAy:G  -¥t{x,y):{FAG),  (from  Example  1.3) 
iv)  CP  h  x:FVy:G  {ax  +  by) :  (FVG).  (from  Example  1.4) 

The  following  theorem  demonstrates  that  proof  existence  in  any  absolute  operation  on 
proofs  can  be  instantiated  with  a  specific  proof  polynomial. 

3.3  Theorem.  For  any  invariant  operation  on  proofs 

\J/\xij:Cij-^aG 

i  3 

one  can  construct  a  proof  polynomial  p{x)  such  that 

CPhy  /\xir.Cij^p{x):G. 

*  3 


Proof.  Let  (2)  be  an  invariant  operation  on  proofs,  and  let  us  denote 

V  A 

»  3 

2(DF)*  =  3yPr/(y,rF-'). 
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by  C.  Since  QG  ^  G  is  valid  (under  all  arithmetical  interpretations),  the  formula  G  — >  G  is 
also  valid.  By  the  completeness  theorem  for  CP  (see  Section  5),  CP  h  G  ^  G.  By  Lifting  1.2 
and  Deduction,  for  a  fresh  variable  y  there  is  a  proof  polynomial  t{y)  such  that 

CP\-y:C^t{y):G.  (4) 

3.4  Lemma.  For  any  formulas  A,B  one  can  construct  a  proof  polynomial  u{x,y)  such  that 

CP  h  x:AAy:B  ->  u{x,y)  :(x:AAy:B). 

Indeed,  CP  V-  x-.A  — >!x:a::A,  CP  I-  y:B  —^\y:y:B.  By  1.3, 

CP  Hx:x:AA\y:y:B  — >  t{\x,  \y):{x:AAy:B) 
for  an  appropriate  t,  thus 

CP  i-  x:A  A  y:B  t{lx,  ly):{x:AAy:B). 

3.5  Lemma.  For  all  formulas  A,  B  there  exists  a  proof  polynomial  v{x,  y)  such  that 

CP  h  xiAVyiB  v{x,y):{x:Ayy:B). 

Similar  to  the  proof  of  3.4,  using  1.4. 

3.6  Lemma.  One  can  construct  a  proof  polynomial  s{x)  such  that 

CP\-C  s{x):C. 

Proof.  This  lemma  is  proved  by  a  straightforward  induction  on  the  formula 

i  3 

with  the  use  of  3.4  and  3.5. 

◄ 

From  (4),  we  have  h  s  :  C  ^(s)  :  G,  and  thus  from  3.6  we  get  the  desired  result 
h  C  t{s):G.  This  concludes  the  proof  of  3.3. 

◄ 
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3.7  Comment,  Whereas  (2)  requires  all  three  proof  connectives,  the  realization  of  deter¬ 
ministic  operations  of  the  form  (1)  does  not  require 


3.8  Comment.  We  demonstrated  that  every  invariant  propositional  operation  on  proofs 
can  be  represented  by  a  corresponding  proof  polynomial.  Thus  the  basic  operations  •, !,  +  to 
some  extent  play  for  the  proofs  a  role  similar  to  that  played  by  the  boolean  connectives  in 
classical  logic  where  every  truth  function  (total  function  from  {0, 1}”  to  {0, 1})  is  represented 
by  a  boolean  polynomial. 


4  A  sequent  formulation  of  Logic  of  Proofs 

Throughout  Sections  4  -  7  by  sequent  we  mean  a  pair  F  =4“  A,  where  F  and  A  are  finite  sets 
of  ZIP-formulas.  Axioms  of  iCPQo  are  sequents  of  the  form  F  F  and  ±  .  Along  with 

the  usual  Gentzen  sequent  rules  of  classical  propositional  logic,  including  the  cut  rule  (cf.  the 
system  Glc  from  [45]),  the  system  CPGo  contains  the  rules 


A,F  =>  A 
t:A,T  ^  A 


(:  =^) 


F  A,t:A 
F  ^  A,lt:t:A 


(^!) 


F  ^  A,t:A 


F  A,  (t  -I-  s) ;  A 


(=^+) 


F  A,t:A 


F  =>  A,  (s  +  t):A 


(^+) 


F  A,  s:  (A  — )■  B)  F  A,  t :  A 
F  =>  A,  (s  •  t) :  B 


(=^-) 


As  will  follow  from  the  proof  of  5.1  the  rule  (=>■•)  for  jCPQq  (but  not  for  JCPQ)  can  in  fact 
be  limited  by  the  condition  that  A  B  must  occur  in  F,  A,  without  losing  any  provable 
sequents 

The  system  CPQ  is  CPGq  plus  the  rule 

-  (=>  c), 

=>•  c:A 

where  A  is  an  axiom  AO  -  A4  from  Section  1,  and  c  is  a  proof  constant. 
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Under  £PG  and  CPQq  we  mean  the  corresponding  systems  without  the  rule  Cut. 

4.1  Theorem.  U  T  A  iff  jCPo^  AT -^  \/ A,  CPghT=^A  iff  CP  h  AT  ^\/ A. 
The  proof  proceeds  by  a  straightforward  induction  both  ways. 

4.2  Corollary.  £PpS)  h  F  iff  CPQq  ^  CS  ^  F 

4.3  Definition.  The  sequent  F  A  is  saturated  if 

A-^  B  implies  5  €  F  or  ^  €  A, 

2.  A  -¥  B  £  A  implies  A  G  F  and  B  G  A^, 

3.  t:A  G  F  implies  A  G  F, 

4.  \t:t:A  G  A  implies  t:A  G  A, 

5.  (s  +  t) :  A  G  A  implies  s :  A  G  A  and  t :  A  G  A 

6.  {s  ■  t)  :  B  £  A  implies  for  each  X  B  occurring  as  a  subformula  in  F,  A  either 
s:{X-^B)  £  A  orf.X  £  A. 

4.4  Lemma.  (Saturation  lemma)  Suppose  CPQff  1/  F  A.  Then  there  exists  a  saturated 
sequent  F'  ^  A'  such  that 

f.  F  C  r,  A  C  A', 

2.  F'  ^  A'  is  not  derivable  in  CPQq  . 

Proof.  A  saturated  sequent  is  obtained  by  the  following  Saturation  Algorithm  SAT.  Given 
F  ^  A,  for  each  formula  S  from  FU  A  nondeterministically  try  to  perform  one  of  the  following 
steps.  If  none  of  the  clauses  1  -  6  is  applicable  terminate  with  success. 

1.  if  5  =  (A  -4  5)  G  F,  then  put  A  into  A  or  B  into  F, 

2.  if  5  =  (A  B)  G  A,  then  put  A  into  F  and  B  into  A, 

3.  if  S  =  t:A  G  F,  then  put  A  into  F, 

4.  if  S  =\t:t:A  £  A,  then  put  t:A  into  A, 

5.  if  S  =  (s  + 1)  :A  G  A,  then  put  both  s:A  and  t:A  into  A, 

6.  if  S  =  (s  •  •  -  t) :  B  G  A,  then  for  each  Ai, . . .  such  that  A,  B  is  a  subformula  in 

F,  A  put  either  — )•  B)  oi  t:Xi  into  A, 

7.  if  F  n  A  7^  0  or  ±  G  F,  then  backtrack.  If  backtracked  to  the  root  node  terminate  with 
failure. 

The  Saturation  Algorithm  SAT  terminates.  Indeed,  SAT  is  finitely  branching  and  each 
non-backtracking  step  breaks  either  a  subformula  of  F  A  or  a  formula  of  the  type  t :  F,  where 
both  t  and  F  occur  in  F  ^  A.  There  are  only  finitely  many  of  those  formulas,  which  guarantees 

®Tlie  clauses  concerning  other  boolecui  connectives  eure  optioned. 
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termination.  Moreover,  SAT  terminates  with  success.  Indeed,  otherwise  SAT  terminates  at 
the  root  node  F  =>  A  of  the  computation  tree  with  all  the  possibilities  exhausted  and  no  way 
to  backtrack.  Then  the  computation  tree  T  of  SAT  contains  the  sequent  F  =>  A  at  the  root, 
and  JCPGo  axioms  at  the  leaf  nodes.  By  a  standard  induction  on  the  depth  of  a  node  in  T  one 
can  prove,  that  every  sequent  in  T  is  derivable  in  CPQq  ^  which  contradicts  the  assumption 
that  CPQq  \/  T  a.  The  nodes  corresponding  to  the  steps  1-4  and  6  are  trivial.  Let  us 
consider  a  node,  which  corresponds  to  5.  Such  a  node  is  labelled  by  a  sequent  11  0, 

and  its  children  are  2^  sequents  of  the  form  11  ^  where  a  =  (<Ji . . . , 

is  an  n-tuple  of  0‘s  and  l‘s,  and 


f  s:{Xi  B),  if  (Ti  =  0 
\  t:Xi^  if  (Ti  =  1. 


Here  Xi, . .  .,Xn  is  the  list  of  all  formulas  such  that  Xi  — B  is  a  subformula  of  F  A.  By 
the  induction  hypothesis  all  the  child  sequents  are  derivable  in  jCPQq.  In  particular,  among 
them  there  are  2^"^  pairs  of  sequents  of  the  form  H  0',  s:  (Xi  B)  and  H  =>  Q',t:Xi, 
To  every  such  pair  apply  the  rule  (  •)  to  obtain  H  =>•  0'  (we  assume,  that  st :  B  £  0'. 
The  resulting  2”“^  sequents  are  of  the  form  H  =>  0,  si :  B,  >2^, . . . ,  .  After  we  repeat  this 

procedure  n  —  1  more  times  we  end  up  with  the  sequent  H  0,  si:B,  which  is  thus  derivable 
in  jCPQq  . 


Note,  that  in  a  saturated  sequent  F  =>  A  the  set  F  is  closed  under  the  rules  t :  X/X  and 

X-^Y.XjY. 


4.5  Lemma.  For  each  saturated  sequent  F  A  not  derivable  in  jCPQq  there  is  a  set  of 
JCP -formulas  T  (a  completion  ofT  A)  such  that 

1.  F  is  a  provably  decidable  set,  for  each  term  t  the  set  I{t)  =  {X  \t:X  6  F}  is  finite  and 
a  function  from  a  code^  of  t  to  a  code^  of  I (i)  is  provably  computable^ 

2.  T  cf,  An  F  =  0, 

3.  if  tiX  then  A  E  F, 

4-  if  s:{X  —^Y)  £  T  and  6  F,  then  (s  *  i)  iF  6  F, 

5.  ift*,X£Yf  then  \titiX  £  F, 

6.  ift\X£V  and  s  is  a  proof  polynomial^  then  {t  +  s):X  £  F  and  {s  +  t):X  E  F. 


Proof.  We  describe  a  completion  algorithm  COM.  that  produces  a  series  of  finite  sets  of 

£P-formulas  Fq,  Fi,  F2 _ Let  Fq  =  F. 

For  each  natural  number  z  >  1  let  COM  do  the  following: 

^For  example,  a  Godel  number  of  t. 

^For  example,  a  canonical  number  of  a  finite  set  of  Godel  numbers  of  the  formulcis  from  I{t). 
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if  i  =  3A;,  then  COM  puts 

r,+i  =  ri{J{{s^t):Y  I  s:{X^Y),t:X  €  T,}, 

s,t 

if  i  =  3A:  +  1,  then  OClA/l  puts 

Ti+i  =  Ti[j{H:t:X\t:X  eVi}, 

t 

if  i  ==  3A;  +  2,  then  COM  puts 

Fi+i  =  Ti  u«»  +  t):X,  (i  +  s):X  |  t:X  G  T,-,  |s|  <  i.}® 

s,t 


Put 

i 

1.  It  is  easy  to  see  that  at  step  i  >  0  COM  produces  formulas  of  the  form  t:X  with  the 
length  of  t  greater  than  i.  This  observation  secures  the  decidability  of  F.  Indeed,  given  a 
formula  F  of  length  n  wait  until  step  i  =  n  of  COM'^  F  G  Fn  iff  F  €  F.  Similar  argument 
establishes  the  decidability  of  I{t). 

Note  that  all  F^-’s  are  closed  under  the  rules  t:XIX  and  X-^Y^X/Y .  The  closure  under 
X—^Y^XjY  is  obvious,  since  it  holds  for  Fq  and  CDM  does  not  add  any  new  formulas  of  the 
form  To  establish  the  case  of  t:XfX  we  use  an  induction  on  i.  Suppose  F^  is  closed 

under  t  :XfX,  If  z  =  3A;,  then  all  new  formulas  at  this  step  are  of  the  form  (s  •  ^)  rT  with 
s:{X-^Y)jt:X  G  F*.  By  the  IH,  X— >-y, X  G  F^  and  Y  G  F^-,  thus  Y  G  Fi+i.  In  particular,  it 
secures  property  3. 

2.  The  inclusion  F  C  F  is  clear.  Suppose  i  is  the  least  number  such  that  there  exists  a 
formula  F  G  F^-  H  A.  F  cannot  be  from  Fq,  since  Fq  =  F  and  A  are  disjoint.  Thus  F  has 
been  introduced  by  COM  at  step  z  >  0.  Suppose  i  —  1  =  3k,  Then  F  ^  {s  •  t)  :Y  and  for 
some  formula  X  we  have  s:{X  —^Y)^t:X  G  F^-^i.  In  such  a  case  X  -^Y  G  Fq  =  F,  since  a 
formula  with  the  implication  as  the  principal  connective  cannot  first  appear  in  F^  with  j>0. 
Suppose  (s  •  t)  :  y  €  A.  Then  by  the  saturation  properties  of  the  sequent  F  =>■  A,  either 
s:(X^y)  G  A  or  t:X  G  A.  In  either  case  r,_i  U  A  /  0.  The  remaining  clauses  follow  easily 
from  the  definitions  and  saturation  properties  of  the  sequent  F  A. 

4.,  5.,  6.  are  guaranteed  by  the  definition  of  COM.  Indeed,  if  some  */ condition  is  fulfilled, 
then  it  occurs  at  step  i  and  COM  necessarily  puts  the  then  formula  into  F,+3  at  the  latest. 

◄ 


is  the  length  of  s,  i.e.  a  total  number  of  veiriables,  consteuits,  and  functioned  symbols  in  s. 
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5  Consolidated  completeness  theorem 

In  this  section  we  establish  completeness  and  cut  elimination  theorems  for  the  Logic  of  Proofs. 


5.1  Theorem.  The  following  are  equivalent 

1.  CPGo  I-  r  A, 

2.  £Pgo^T=^  A, 

3.  £Pot- Ar-»-VA, 

4.  for  every  interpretation  *  VA  {l\T  -¥\J  A)* , 

5.  for  every  interpretation  *  (AT  ->  V true. 

Proof.  The  steps  from  1  to  2  and  from  4  to  5  are  trivial.  The  step  from  2  to  3  follows  from 
4.1,  from  3  to  4  follows  from  2.2.  The  only  remaining  step  is  thus  from  5  to  1.  We  assume 
“not  1”  and  establish  “not  5”.  Suppose  jCPQq  1/  F  A.  Our  aim  now  will  be  to  construct 
an  interpretation  *  such  that  {/\r  S/  A)*  is  false  (in  the  standard  model  of  arithmetic). 

Perform  a  saturation  procedure  to_get  a  saturated  sequent  F'  =»  A'  (4.4),  and  then  make 
a  completion  to  get  a  set  of  formulas  F'  (4.5). 

We  define  the  desired  interpretation  ♦  on  sentence  letters  5,-,  proof  variables  xj  and  proof 
constants  aj  first.  As  usual,  ’’t"'  denote  the  Godel  number  of  t.  Put 


t  +  l  =  t  +  l,  if  5i€f' 
i  +  1  =  0,  if  5i  ^  F, 


3..*  —  r-.-i 
•‘'J  —  •‘'3  1 


a/  =  - 


a 


.1 

j  • 


The  remaining  parts  of  *  are  constructed  by  a  multiple  arithmetical  fixed  point  equation. 
Let  (PROOFf  (g),  ©,  ^  be  a  standard  nondeterministic  proof  predicate  from  Section  2, 

with  (g)  standing  for  application,  ©  for  choice  and  ft'  for  proof  checker  operations  on  proofs 
associated  with  PROOF,  For  technical  convenience  and  without  loss  of  generality  we  assume 
that  PROOFi^f^^  k)  is  false  for  any  £P-term  t  and  any  k  ^  oj. 

Let  be  a  provably  Ei  formula,  i.e.  (p{x^y)  is  provably  equivalent  to  z) 

for  some  standard  primitive  recursive  formula  y,  z).  Under  fjbx<p{x^  ^  we  mean  a  natural 
term  for  a  computable  function  /(^: 

Given  y  find  a  tuple  (ti,  y,  z)  with  the  least  number  such  that  y,  z).  Let  /(^  =  u. 

In  what  follows  *  is  based  on  a  normal  proof  predicate  Prfi 

m(x,y)  =  pzM{x,y,z),  a{x,y)  =  ixzA{x,y,z),  c{x)  -  iizC{x,z), 

where  Pr/ ,  M(x,y,2r),  A(a:,y,z),  C{xyz)  are  determined  by  a  fixed  point  equation  FPE 
below.  Note,  that  can  be  calculated  in  a  primitive  recursive  way  from 

^Prf{x,yy,  ^M{x,y,zr,  ^C(x,  z)^,  ^A(x,  y, 
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for  any  subformula  B  from  F'  U  A\ 

By  the  arithmetical  fixed  point  argument  there  exist  arithmetical  formulas  Prf{x,y), 
M{x,  y,  z),  A{x,  y,  z),  C{x,  z)  such  that  VA  proves  the  following  fixed  point  equation  (FPE): 

Prf{x,y)  ^  PROOF{x,y)  V 

“x  =  T  for  some  CP-term  t”Ay  =  ^B*''  A  “B  €  /(t)”. 


M (x,  y,z)  if  x  =  '"s"'  and  y  =  ’'t~'  for  some  terms  s,  t,  then  z  =  ’’sf  , 

if  X  =  ''s~'  and  y  ^  ’’t"'  for  any  term  t,  then  recover  I  {s), 
put  z  =  fiw{/\{PROOF{w,  '~B*~')  I  B  €  /(«)})  <S>  y, 

if  y  =  and  x  ^  ^s^  for  any  term  s,  then  recover  I{t), 
put  z  =  xiS)  pw{f\{PROOF{v3^  '"B*’’)  |  B  €  /(<)}), 

z  =  x®y,  else. 

C{x,  z)  if  X  =  ''t*~',  then  z  =  ’’If  , 

z  ='(la:,  else. 

A{x,  y,z)  <->■  if  X  =  ^s~',  y  =  ’’f  for  some  terms  s,  t,  then  z  =  '"s  + 1"'  , 

if  X  =  and  y  7^  ’’t’’  for  any  term  t,  then  recover  I{s), 
put  z  =  p,w{/\{PROOF{w,  ‘“B*"’)  I  B  G  /(«)})  0  y, 

if  y  =  and  x  ^  ’’s''  for  any  term  s,  then  recover  I  (t) , 
put  z  =  a:  0  pw{/\{PROOF{w,  ^B*~')  \  B  G  lit)}), 

z  =  xQy,  else. 

Here  fiw{/\{PROOFiw,’~ B*~')  \  B  G  I{t)})  is  a  natural  computable  t-term  corresponding  to 
the  following  computable  procedure: 

“Given  ’’t"'  take  a  code  of  I (t)  and  calculate  a  code  of  I*  (t),  which  is  a  finite  set 
of  arithmetical  translations  of  CP  formulas  from  /(t).  Set  w  equal  to  the  least 
number  which  is  a  proof  of  all  formulas  from  /*(t)  in  the  sense  of  PROOF.  Put 
w=0,  if  lit)  is  empty.  ” 

The  convergence  of  pwi/\{PROOFiw,'' B*~')  \  B  G  1(1)})  will  be  established  in  5.7.  By  FPE 
it  is  immediate  that  Prf  is  a  provably  Ai-formula  and  if  VA  h  ip,  then  Prfik,^ip'^  for  some 
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k  Q.  u).  Also  by  FPE,  each  of  the  formulas  M,  A,  and  C  is  provably  Si,  and  thus  the  terms 
m{x,y),  a{x,y)  and  c(x)  are  computable. 

5.2  Lemma.  VA  t*  =  for  any  term  t. 

Indeed,  according  to  FPE 

{sty  =  m(s*,  t*)  =  mCs"',  T)  =  ^st^. 

The  same  holds  for  {s  +  t)*  and  \t*. 

5.3  Corollary.  *  is  injective  on  formulas  and  terms  from  F'  U  A'. 


5.4  Corollary.  X*  is  provably  Ai  for  any  X  occurring  as  a  subformula  in  F'  U  A'. 

Indeed,  if  X  is  atomic,  then  X  is  Ai  by  the  definition  of  *.  If  X  is  tiF,  then 

{t:Yy  =  PrfifyY*^), 

and  since 

VA  h  Prf{t\  ^  Pr/(T,  '■y*-') 

and  Prf{’'t~'yY*~')  is  provably  Ai,  then  {tiY)*  surely  is  Ai.  Since  Ai  is  closed  under  boolean 
connectives  for  each  X  occurring  as  a  subformula  in  F'  U  A',  X*  is  provably  Ai . 

5.5  Lemma.  If  X  G  F',  then  VA  I-  X*,  if  X  £  A',  then  VA  I — X*. 

Proof.  By  induction  on  the  length  of  X.  Base  case,  i.e.  X  is  atomic  or  X  =  t  :y.  If  X  is 
atomic,  then  X*  is  true  iff  X  €  F'  by  definition  and  since  F'  and  A'  are  disjoint.  If  X  =  t:y 
and  t:y  G  f',_then  VA  h  “y  G  /(t)”  and  VA  h  {tiY)*  by  FPE.  If  t:y  G  A',  then  ‘T  G  /(t)” 
is  false,  since  F'  and  A'  are  disjoint.  The  formula  PROOF{t*,  '"y*"')  is  also  false  since  t*  = 
and  PROOF yV,  k)  is  false  by  assumption.  Thus  (tiY)*  is  false  by  FPE.  The  induction  steps 
corresponding  to  boolean  connectives  are  standard  and  based  on  the  saturation  properties 
of  F'  A'.  For  example,  let  X  =  y  ^  Z  and  Y  Z  £  T'.  Then  Y  Z  G  F',  and  by 
definition  4.3  y  G  F'  or  Z  G  A'.  By  the  induction  hypothesis,  y*  is  true  or  Z*  is  false,  and 
thus  (y  — >  Zy  is  true,  etc. 

◄ 


5.6  Lemma.  VA  h  O  Prf{ny(fV)  for  some  n  £(v. 
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Proof.  It  remains  to  establish  {<=).  From  FPE  it  is  clear  that 

Pr/(n,  =^>  “ PROOF {n,  or  =  B*  for  some  B  such  that  t:B  ef'^\ 

In  the  latter  case  P  6  F^  by  the  saturation  property  of  F',  and  VA  h  B*  by  5.5. 

◄ 


5.7  Lemma.  For  any  closed  computable  terms  s,t  the  terms  m(s, a{s^t),  c{t)  are  closed 
and  computable. 

Proof.  It  suffices  to  establish,  that  for  any  proof  polynomial  t  the  arithmetical  term 
pw{/\{PROOF{w^^ I  B  G  I{t)})  is  closed  and  computable.  For  that  it  suffices  to  check 
that  VA  h  3w{/\{PROOF{w^^B'^^)  |  B  €  F(t)}).  Argue  in  VA.  Given  take  a  code  of  I{t) 
and  a  code  of  I*{t)^  which  is  a  finite  set  of  arithmetical  translations  of  £P  formulas  from  I{t). 
By  5.5  VA  proves  all  arithmetical  formulas  from  P{t),  thus  VA  h  f\{PROOF{k^  |  B  G 

I{t)}  for  some  natural  number  k. 

◄ 


5.8  Lemma.  The  normality  conditions  for  Prf  are  fulfilled. 

Proof.  Normality  checklist: 

1.  Prf  is  provably  Ai  (follows  from  FPE).  Conditions  on  the  arithmetical  terms  m(a:,t/), 
a(x,  y)  and  c(a:)  are  fulfilled  by  FPBand  5.7. 

2.  for  any  finite  set  5  of  arithmetical  formulas  VA  h  5  if  and  only  if  Pr/(n,  5)  holds  for 
some  natural  n  (follows  from  FPE  and  5.6). 

3.  for  each  n  the  set  of  formulas  {(p  \  Prf(n^^(pV)}  is  finite.  Indeed,  either  n  is  not  a 
number  of  an  /P-term,  then  use  the  normality  of  PROOF.  Otherwise  use  the  finiteness  of 
I{t)  and  the  injectivity  of  *. 

< 

Let  us  finish  the  proof  of  the  concluding  “not  1  implies  not  5”  part  of  5.1.  Given  a  sequent 
F  A  not  provable  in  CPGq  we  have  constructed  an  interpretation  *  such  that  F*  are  all 
true^  and  A*  are  all  false  in  the  standard  model  of  arithmetic  (5.5).  Therefore,  (/\F  — V 
is  false. 


5.9  Corollary.  JCVq  decidable. 
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Indeed,  given  an  £P-formula  F  run  the  saturation  algorithm  SAT  on  a  sequent  F.  If  SAT 
fails,  then  jCPq  ^  F.  Otherwise,  jCPq  V  F- 

5.10  Corollary.  (Completeness  of  CP  with  respect  to  the  provability  semantics) 

CP^PS)  \-  F  ^  PA  h  F*  for  any  CS -interpretation 

O  F*  is  true  for  any  CS -interpretation  *. 

5.11  Corollary.  (Cut  elimination  in  CP.)  Every  sequent  derivable  in  CPQ  can  be  derived 
without  the  cut  rule. 


Proof.  Let  CPQ  h  F  A.  For  each  use  of  the  rule  ^  c:  A  replace  it  by  the  axiom 
sequent  c:  A  c:  A,  and  add  c:  A  to  the  antecedents  of  all  the  sequents  below  the  given  node. 
The  result  will  be  a  legitimate  derivation  in  CPQo  of  the  sequent  CS,  F  A  for  a  constants 
specification  CS  consisting  of  all  those  c  :  A’s.  By  5.1  there  exists  a  cut-free  derivation  V 
of  CS,  F  A  in  CPQo-  Without  loss  of  generality  we  may  assume  that  every  formula  c :  A 
from  CS  there  has  been  introduced  in  V  by  an  axiom  c :  A  ^  c :  A.  Two  other  options:  the 
weakening  rule,  or  the  rule  (;  )  can  be  eliminated.  The  weakenings  can  be  easily  removed 

without  any  harm  to  a  derivation.  By  induction  on  the  cardinality  of  CS  we  show  that  there 
exists  a  cut-free  derivation  of  CS',  F  A  in  CPQo  such  that  CS'  C  CS  and  no  occurrence  of  a 
formula  c:  A  from  CS'  has  been  introduced  in  this  derivation  by  the  rule  (:  ).  The  base 

case  corresponds  to  an  axiom  and  is  trivial.  Every  use  of  the  rule  (:  ^ ) 

V'  V'q  V' 

A,  F'  ^  A'  transforms  into  A  A,  F'  =4^  A' 

c:A,T'  ^  A'  r  =>  A' 

The  end  sequent  F'  A'  of  the  latter  derivation  is  one  formula  from  CS  less  and,  by  the  IH 
admits  a  cut-free  derivation  without  an  introduction  of  formulas  from  CS  by  the  rule  (:  =^). 
Finally,  in  a  cut-free  derivation  of  CS,T  A  in  CPQo  without  weakenings  and  (:  =>)  for 

formulas  from  CS  replace  each  axiom  c:  A  c:  A  for  c:  A  G  GS  by  the  rule  c)  introducing 

c:  A.  The  result  will  be  a  derivation  in  CP  of  the  sequent  F  =>  A. 

Of  course,  cut  elimination  for  CP  can  be  also  established  by  a  direct  system  of  reductions 
(cf.  Section  8  of  this  paper).  However,  here  we  have  got  the  cut  elimination  theorem  almost 
for  free,  as  a  side  product  of  the  arithmetical  completeness  theorem. 

◄ 

5.12  Comment.  Decidability  of  CP  follows  from  the  results  of  [33].  This  fact  can  also  be 
obtained  from  the  cut  elimination  property  of  CP  (Corollary  5.11)  as  as  exercise. 
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6  Realization  of  modal  and  intuitionistic  logics 


It  is  easy  to  see  that  a  forgetful  projection  of  JCP  is  correct  w.r.t.  Si.  Let  be  the  result 
of  substituting  DX  for  all  occurrences  of  in  F,  and  =  {F°  |  F  6  F}  for  any  set  F  of 
£P“formulas. 

6.1  Lemma.  If  CP  V-  F,  then  54  h  F^. 

Proof.  This  is  a  straightforward  induction  on  a  derivation  in  CP. 

◄ 


The  goal  of  the  current  section  is  to  establish  the  converse,  namely  that  CP  suffices  to 
realizate  any  54  theorem.  By  an  CP- realization  of  a  modal  formula  F  we  mean  an  assignment 
of  proof  polynomials  to  all  occurrences  of  the  modality  in  F,  F^  is  the  image  of  F  under  a 
realization  r.  Positive  and  negative  occurrences  of  modality  in  a  formula  and  a  sequent  are 
defined  in  the  usual  way. 

1.  An  indicated  occurrence  of  □  in  OF  is  positive. 

2.  Any  occurrence  of  □  in  G-^F,  GaF,  FaG,  GVF^  FvG,  OF  and  F  A,F  has  the 
same  polarity  as  the  corresponding  occurrence  of  □  in  F. 

3.  Any  occurrence  of  □  in  -iF,  F->G  and  F,  F  =>  A  has  a  polarity  opposite  to  that  of 
the  corresponding  occurrence  of  □  in  F. 

In  a  provability  context  DF  is  intuitively  understood  as  Hhere  exists  a  proof  x  of  F\  After 
a  skolemization,  all  negative  occurrences  of  □  produce  arguments  of  Skolem  functions,  while 
positive  ones  give  functions  of  those  arguments.  For  example,  OA  OB  should  be  read 
informally  as 

3x  “  X  is  a  proof  of  A”  3y  y  is  a  proof  of  F”, 
with  the  Skolem  form 


"  X  is  a  proof  of  A^  "  f(x)  is  a  proof  of  B”. 

The  following  definition  captures  this  feature.  A  realization  r  is  normal  if  all  negative  occur¬ 
rences  of  □  are  realized  by  proof  letters. 

6.2  Theorem.  ^54  h  F^  then  CP  V-  F^  for  some  normal  realization  r. 

Proof.  Consider  a  cut-free  sequent  formulation  of  54,  with  sequents  F  A,  where  F  and 
A  are  finite  sets  of  modal  formulas.  Axioms  are  sequents  of  the  form  5  5,  where  5  is  a 
sentence  letter  and  ±  ^  .  Along  with  the  usual  structural  rules  and  rules  introducing  boolean 
connectives  there  are  two  proper  modal  rules  (cf.[45]): 
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A,T^  A 


and 


nv  A 


i^a) 


(□=^) 

aA,T^  A 


□r  =»  oA 


(□{Ai,...,A„}  =  {DAi,...,nA4). 

If  «S4  I-  F,  then  there  exists  a  cut-free  derivation  T  of  a  sequent  F.  It  suffices  now  to 
construct  a  normal  realization  r  such  that  CP  h  /\T’'  —^  \/  A’^  for  any  sequent  F  A  in  T. 
We  will  also  speak  about  a  sequent  F  A  being  derivable  in  CP  meaning  CP  H  /\  F  A, 
or,  equivalently,  F  l-£p  or  CPQ  h  F  A.  Note  that  in  a  cut-free  derivation  T  the  rules 
respect  polarities,  all  occurrences  of  □  introduced  by  ( =>  □)  are  positive,  and  all  negative 
occurrences  are  introduced  by  (□  ^ )  or  by  weakening.  Occurrences  of  □  are  related  if  they 
occur  in  related  formulas  of  premises  and  conclusions  of  rules;  we  extend  this  relationship  by 
transitivity.  All  positive  occurrences  of  □  in  T  are  naturally  split  into  disjoint  families  of 
related  ones.  We  call  a  family  essential  if  it  contains  at  least  one  case  of  the  (=^-  □)  rule. 

Now  the  desired  r  will  be  constructed  by  steps  1-3  described  below.  We  reserve  a  large 
enough  set  of  proof  variables  as  provisional  variables. 

Step  1.  For  every  negative  family  and  non  essential  positive  family  we  replace  all  occur¬ 
rences  of  □  by  X :  for  a  fresh  proof  variable  x. 

Step  2.  Pick  an  essential  family  /,  enumerate  all  the  occurrences  of  rules  □),  which 
introduce  boxes  of  this  family.  Let  n/  be  the  total  number  of  such  rules  for  the  family  /. 
Replace  all  boxes  of  the  family  /  by  the  term 

(Wl  Vrif), 

where  u,’s  are  fresh  provisional  variables.  The  resulting  tree  To  is  labelled  by  CP  formulas, 
since  all  occurrences  of  the  kind  OX  in  T  are  replaced  by  f  :X  for  the  corresponding  t. 

Step  3.  Replace  the  provisional  variables  by  proof  polynomials  as  follows.  Proceed  from 
the  leaves  of  the  tree  to  its  root.  By  induction  on  the  depth  of  a  node  in  To  we  establish 
that  after  the  process  passes  a  node,  a  sequent  assigned  to  this  node  becomes  derivable  in 
CP.  The  axioms  S  S  and  ±  =>  are  derivable  in  CP.  For  every  rule  other  than  ( □)  we 
do  not  change  the  realization  of  formulas,  and  just  establish  that  the  concluding  sequent  is 
provable  in  CP  given  that  the  premises  are.  Moreover,  every  move  down  in  the  tree  To  other 
than  (=^  □)  is  a  rule  of  the  system  CPQ,  therefore,  the  induction  steps  corresponding  to  these 
moves  follow  easily  from  the  equivalence  of  CP  and  CPQ. 

Let  an  occurrence  of  the  rule  ( □)  have  number  i  in  the  numbering  of  all  rules  ( □) 
from  a  given  family  /.  This  rule  already  has  a  form 

yi-yi,---,yk-yk  =»  y 
yi‘-yu----,yk‘^yk  {ui  +  ...+unf):y , 
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where  j/i, . . . ,  j/fc  are  proof  variables,  ui, . . . ,  Un^  are  proof  polynomials,  and  Ui  is  a  provisional 
variable.  By  the  induction  hypothesis,  the  premise  sequent  yi’.Yi, ..  .,yk:Yk  =>  Y  is  derivable 
in  CP,  which  yields  a  derivation  of 


yi-Yi,...,yk:Yk  =>  Y. 

By  Lifting  (Lemma  1.2),  construct  a  proof  polynomial  t{yi, . . .,  t/n)  such  that 

yi‘Yi,...,yk:Yk  t{yi, . .  .,yn)-.Y 


is  derivable  in  CP.  Since 

CP  h  f :  y  — >  (ui  +  . . .  +  u,_i  +  t  +  'U,+i  -f-  .  .  .  +  Unj)  -Y 


we  have 


{ui  +  +  +  ^  +  ^^4.1  +  . . .  +  :F. 

Now  substitute  t(yi, . . , ,  yn)  for  Ui  everywhere  in  the  tree  %,  Note,  that  t{yi, . . . ,  i/„)  has  no 
provisional  variables,  there  is  one  provisional  variable  (namely  Ui)  less  in  the  entire  %,  All 
sequents  derivable  in  £P  remain  so,  the  conclusion  of  the  given  rule  (=^  □)  became  derivable, 
and  the  induction  step  is  complete. 

Eventually,  we  substitute  terms  of  non-provisional  variables  for  all  provisional  variables  in 
To  and  establish  that  the  corresponding  root  sequent  of  To  is  derivable  in  JCP,  Note  that  the 
realization  of  O’s  built  by  this  procedure  is  normal. 

◄ 


6.3  Corollary.  (Arithmetical  completeness  of  54.)  S4:\-  F  iff  there  is  a  realization  r  and 

a  constant  specification  CS  such  that  is  CS -valid. 


6.4  Comment.  It  follows  from  6.1  and  6.2  that  54  is  nothing  but  a  lazy  version  of  CP  when 
we  don’t  keep  track  on  the  proof  polynomials  assigned  to  the  occurrences  of  □.  Each  theorem 
of  54  admits  a  decoding  via  as  a  statement  about  specific  proofs.  The  language  of  CP  is 
more  rich  than  the  one  of  54.  In  particular,  54  theorems  admit  essentially  different  realizations 
in  CP,  For  example,  consider  two  theorems  of  CP  having  the  same  modal  projection:  xiFVy: 
F  — {x  +  y)  :  F  and  x  :  F\/x  :  F  ^  x  :  F.  The  former  of  these  formulas  is  a  meaningful 
specification  of  the  operation  In  a  contrast,  the  latter  one  is  a  trivial  tautology.  So,  CP 
is  the  right  logic  of  provability,  and  54  should  be  considered  as  a  lazy  higher  order  language  on 
top  of  CP,  A  general  recipe  for  using  54  as  a  provability  logic  might  be  the  following:  derive 
in  54  or  reason  about  54  using  a  conventional  modal  logic  technique  as  before,  translate  the 
results  into  CP  to  recover  their  true  provability  meaning. 
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Let  T(F)  denote  a  translation  of  an  intuitionistic  formula  F  into  the  plain  modal  language 
which  puts  the  prefix  □  in  front  of  all  atoms  and  implications  in  F.  It  is  well-known  that 
Int^F  iff  Si  T{F)  ([12]). 

6.5  Corollary.  (Realization  of  intuitionistic  logic)  For  any  Xnt-formula  F 
Xnt  t-  F  <<=>•  h  (T(F))''  for  some  realization  r. 


6.6  Comment.  One  cannot  realize  even  a  formula  from  1.4  without  Moreover,  the 

“■f”free  fragment  of  jCP  cannot  realize  modal  modus  ponens:  there  are  modal  formulas  A 
and  A  -¥  B  both  realizable  without  “-I-”  such  that  B  is  not  realizable  without  The 

“-|-”free  fragment  of  CP  is  not  complete  with  respect  to  the  class  of  all  deterministic  proof 
predicates.  In  order  to  make  it  complete  one  has  to  add  a  functionality  principle  from  [3]. 
The  completeness  of  the  resulting  system  TCP  with  respect  to  deterministic  proof  systems  was 
established  by  V.  Krupski  in  ([23]).  TCP  does  not  have  a  modal  counterpart.  For  example, 
TCP  derives  a  principle  -i(a; :  A  A  a; ;  (A  — >  A)),  which  is  false  in  any  normal  modal  logic.  One 
of  the  surprises  of  the  logic  of  proofs  is  that 

provability  as  a  modal  operator  corresponds  to  non-deterministic  proofs. 

It  is  easy  to  see  that  the  “-f”free  fragment  of  CP  cannot  realize  the  intuitionistic  formula 
(aV6)  -4  (-IO— f  6),  if  we  use  the  translation  T  from  [12].  However,  this  formula  becomes 
realizable  if  we  use  the  original  Godel  translation  from  [16],  defined  by  the  clauses  g{P 
Q)  =  °9iP)  -t  °5(Q)  and  g{PyQ)  =  □^(F)  V  Ug{Q). 


6.7  Corollary.  (Arithmetical  completeness  of  Xnt.)  Xnt  h  F  iff  there  is  a  realization  r 
and  constant  specification  CS  such  that  T(F)’’  CS -valid. 

Kolmogorov’s  interpretation  of  intuitionistic  logic  Xnt  as  a  “calculus  of  problems^’  ([20])  can  be 
made  explicit  via  £P.  Let  F  be  a  formula  in  the  language  of  Xnt.  Consider  the  translation  k{F) 
of  F  into  the  language  of  «S4  along  the  lines  of  the  (informal)  definitions  in  ([20]):  k{P)  =  DF 
for  a  sentence  letter  F,  k{±)  =  X,  k{A-^B)  =  □[A:(A)  — >•  fc(F)],  k{Af\B)  —  □[A:(A)  AA;(F)], 
fc(AVF)  =  □[A:(A) VA:(F)].  It  is  easy  to  verify  that 

Xnt\-F  ^  .^l-A;(F). 


6.8  Definition.  Let  F  be  a  formula  in  the  intuitionistic  propositional  language.  A  Kol¬ 
mogorov  realization  K  (F)  of  F  is  an  /IP-formula  [^(F)]’’,  where  r  is  a  realization  of  modalities 
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in  k{F)  by  proof  polynomials.  A  formula  F  is  Kolmogorov  realizable  if  it  has  a  Kolmogorov 
realization  K{F)  provable  in  CP.  Under  a  realization  K  propositional  atoms  in  F  become 
atomic  problems^  namely  statements  of  the  sort  t:S  meaning  is  a  proof  of  Intuitionistic 
connectives  are  given  precise  meaning  according  to  [20]. 


6.9  Theorem.  (Completeness  of  Xnt  with  respect  to  the  Kolmogorov  realization) 

Xnt  h  F  ^  F  is  Kolmogorov  realizable. 

Proof.  Either  Xnt  h  F,  then  54  h  k{F)  and,  by  theorem  6.2,  there  exists  a  proof  realization  r 
such  that  CP  h  [k{F)Y-  Put  K{F)  =  [A;(F)]^  Or  54 1/  k{F)  and,  by  lemma  6.1,  CP  \f  [k{F)Y 
for  any  realization  r. 

◄ 


6.10  Comment.  By  theorem  6.9,  the  logic  of  proofs  CP  provides  a  provability  semantics 
for  the  Kolmogorov  ^‘calculus  of  problems^\  A  conjecture,  that  the  ‘‘calculus  of  problems^'^ 
coincides  with  Xnt  was  made  by  Kolmogorov  in  [20].  Note  that  such  realizability  models  of 
Xnt  as  Kleene  realizability  ([19])  and  Medvedev  logic  of  problems  ([29])  provide  only  necessary 
conditions  for  Xnt  (cf.[12]).  Each  of  them  along  with  Xnt  realize  some  formulas  which  are  not 
derivable  in  Xnt. 


7  Intuitionistic  Logic  of  Proofs 

The  Intuitionistic  logic  of  proofs  CPi  is  defined  as  a  system  1,1  with  AO  being  a  list  of  axiom 
scheme  for  the  propositional  intuitionistic  logic.  CPi  is  correct  with  respect  to  the  natural 
provability  interpretation  as  a  calculus  of  proofs  for  either  VA  or  the  intuitionistic  arithmetic 
TLA.  We  do  not  address  the  issue  of  arithmetical  completeness  of  CF^  in  this  paper. 

The  Gentzen  style  system  CPQi  for  the  intuitionistic  logic  of  proofs  can  be  defined  as 
follows  (cf.  the  system  G2i  from  [45]).  Sequents  in  CP&>  are  all  of  the  form  F  F,  where  F 
is  a  multiset  of  £P~fonnulas,  and  F  is  an  >CP-formula. 

Axioms  of  CPQi  are  sequents  of  the  form  F,  F  =>  F,  where  F  is  either  a  sentence  letter  or  a 
formula  of  the  sort  f  :F,  and  sequents  of  the  form  ±,  F  =>  F. 


Rules  of  CP&  are 

aab,t=^c 


A  B 

r  aab 


(RA) 
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A,r=»C  B,T=>C 
AyB,T^C 
r=^A  B,T^C 


A^B,T  C 
A,A,T=^C 


(LV) 

-(i^) 


A,r^c 
A,r  =►  B 


t:A,T  =?►  B 
r  t:A 


(LC) 

(L:) 


(fl/+) 


r  ^  A,  (t  +  s) :  A 


r  =>•  A, 

r  =>  AoVAj  (i  =  0, 1) 

A,r=^  B 


m 

{f. 

{R  -^) 


r  A-^B 

T=^A  A,r'=(>B 


r,r  =»  B 

r  t:A 
r  H:t:A 
T  =>  t:A 


{Cut) 


m 


(Br+) 


r  A,  (5  +  ^):A 


r=?>s:(A-4B)  r=»t:A  ^  T  A  (Be), 

r=^(s.0:B  r=^c:A 

where  A  is  an  axiom  AO  -  A4  of  the  Hilbert  style  system  for  jCFi  (definition  1.1.),  c  is  a  proof 
constant  and  V  is  the  standard  derivation  ofT=^A.  Under  the  standard  derivation  here  we 
mean  the  following.  If  A  is  AO  (i.e.  a  propositional  axiom),  then  X>  is  the  straightforward 
cut-free  derivation  of  F  A  in  the  Gentaen  style  system  for  Int.  For  axioms  A1  -  A4  the 
standard  derivations  are 

V 

F,  r  =>  F 
t:F,r  F 

r  t:F-^F 


where  V  is  the  straightforward  cut-free  derivation  of  F,  F  =>  F  in  the  Gentzen  style  system 
for  Xnt. 

s:{F  G),t:F,T  =>  s:{F  ^  G)  s:{F  ^  G),t:F,r  UF 
s:{F  ^G),t:F,r  ^  {s-t):G 
F  =5>  s:{F  G)-¥{t:F-^{s  •t):G) 


t:F,T  =4^  t:F 
t:F,F=j>  \t:t:F 
F  =>►  t:F^\t:t:F 


t:F,r  t:F 
t:F,r  {t  +  $):F 
F  =>  t:F-¥{t  +  s):F 
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Under  CPQi~  we  mean  a  cut-free  fragment  of  JCP&.. 

7.1  Theorem.  Cut  elimination  holds  for  CPi. 

Proof.  We  shall  deliver  a  syntactical  proof  that  CPQi  f-  F  A  yields  CPQi~  h  F  A. 

7.2  Definition.  A  level  of  a  cut  is  the  sum  of  the  depths  of  the  deductions  of  the  premises. 
The  rank  rk{A,V)  of  a  given  occurrence  of  A  in  a  derivation  V  is  defined  by  the  following 
induction  on  the  depth  of  this  occurrence  in  V.  For  a  term  or  a  formula  X  by  |A|  we  denote 
the  total  number  of  occurrences  of  propositional,  proof  variables  and  constants,  propositional 
and  functional  symbols  in  X.  If  A  €  {P,  -L,  F}  in  a  derivation  V  consisting  of  an  axiom 
P,  F  F  or  J.,  F  F,  then  rk{X,  V)  =  |X|. 

For  all  the  rules  of  CP^  ranks  of  the  corresponding  occurrences  of  the  side  formulas 
coincide.  For  the  rule  (LA) 

rk{AAB,'D)  —  rk{A,'D) rk{B,'D)  +  1. 

Similarly  for  the  rule  (RA),  (LV)  and  (R^). 

For  (FV),  case  j  =  0, 

rA;(AoVAi,F)  =  rk{Ao,V) +  \Ai\  +  l, 

similarly  for  j  =  1. 

For  (L  ->•) 

rk{A-^B,V)  =  rk{A,V)  +  rk{B,V)-\-l. 

For  {L  :) 

rk{t:A,V)  =  rk{A,V) \t\. 

For  (F!) 

rk{\t:t:A,V)  =  rk{t\A,V)-\-\\t\. 

For  {RI+) 

rk{{t  +  s):A,'D)  =  rfc(t:  A,  2?)  +  js] -I- 1. 

For  (Fr-f) 

rk{{t  + s):A,V)  =  rA:(s;  A,  X>)  +  |t| -t- 1. 

For  (F-) 

rk{{s  ■  t):B,V)  =  rk{s:{A-^B),V)  +rk{t:A,'D)  +  \{s-t):B\. 

For  (Fc) 

rlb(c:A,X>)  =  rfc(A,X>) -t- 11|. 

Note  that  rk{A,V  =  |A|. 
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For  {LC)  the  rank  of  the  occurrence  of  A  in  the  conclusion  of  the  rule  is  the  maximum  rank 
of  the  indicated  occurrences  of  A  in  the  premise  sequent.  The  rank  of  the  cut  rule 


T=^A  A,T' ^  B 
T,r>=^B 

is  the  maximum  rank  of  the  indicated  occurrences  of  A  in  the  premise  sequents.  The  outrank 
of  the  deduction  V  is  the  maximum  of  the  ranks  of  the  cuts  occurring  in  V. 

From  the  definitions  it  follows  easily  that 

1.  |A|  <  rk{A,V)  and  rk(A,V)  =  |A|  if  T>  does  not  use  the  rule  (R*). 

2.  rk{A,V)  monotonically  increases  for  the  related  occurrences  of  A  with  the  increase  of 
depth. 

7.3  Lemma.  (Rank-  and  depth-preserving  invertibility  of  the  rule  (R-f)).  IfV  is  a  deriva¬ 
tion  o/r  A-¥B,  then  there  is  a  derivation  V  of  A,  T  =>  B  such  that 

1.  the  depth  ofV  is  not  greater,  then  the  depth  ofV, 

2.  the  outrank  ofV  equals  to  the  outrank  ofV, 

3.  rk{FT>')  =  rk{F,  T>)  for  all  formulas  from  F, 

4.  rk{A,V')-\-rk{B,V')-\-l  =  rk{A^B,V). 

Proof.  An  induction  on  the  depth  of  V.  The  base  case  corresponds  to  an  axiom.  Since 
A-¥B  is  neither  atomic  nor  of  the  form  t:F  the  case  when  is  a  principal  formula  of  an 

axiom  is  impossible.  If  V  is  an  axiom  ±,  A  =>  A->B,  then  put  V  to  be  i.,  A,  A  =>■  B.  For 
the  induction  step  consider  two  possibilities.  If  A  B  is  the  side  formula  of  the  last  rule  in 
X>,  then  replace  A  ^  A-^B  in  the  premise(s)  of  the  last  rule  by  A,  A  =>■  B,  by  IH.  If  A-¥B 
is  the  principal  formula  of  the  last  rule  in  V,  then  the  deduction  ends  with 

A,T^B 

r  A-4B  . 


In  this  case  put  P'  to  be  Bi. 

◄ 


7.4  Lemma,  (m-reduction)  Let  V  be  a  cut-free  derivation  ofT  ^  t :  A.  Then  there  is  a 
derivation  V  of  F  A  such  that 

1.  the  outrank  ofV  is  less  then  the  rank  of  the  indicated  occurrence  oft:A  in  V, 

2.  rk{F,V')  =  rk{F,V)  for  all  formulas  from  F  of  the  end  sequent, 
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3.  rk{A,V')  <  rk{t:A,V)  for  A  and  t:A  being  the  antecedents  of  the  end  sequents  ofV 
and  V  respectively. 

Proof.  Induction  on  the  depth  of  T>.  If  T>  is  an  axiom  t:F,A  ^  t:F,  then  let  V  be  the 
derivation 

Vi 

F,r^F  (L:) 
t:F,T  ^  F  , 

where  Vi  is  a  standard  cut-free  derivation  of  F,  F  F.  Note,  that  such  a  derivation  does  not 
use  the  rule  (i?-),  therefore  rk{X,I>*)  =  |X|  =  rk{X,V)  for  all  formulas  from  F.  Similarly, 
rk{F,V')  =  \F\  <  rk{t:F,V). 

The  induction  step.  The  case  when  t :  A  is  a  side  formula  of  the  last  rule  in  V  is  trivial. 
Let  t:Ahe  the  principal  formula  of  the  last  rule  {R\)  in  V,  then  the  deduction  ends  with 

Vi 

F  t:A 
F  =?>  \t:t:A  . 

In  this  case  X>i  is  a  cut-free  derivations  satisfying  also  the  requirements  2.  and  3.  of  the 
lemma. 

If  the  last  rule  in  V  is  {RI+),  then  the  deduction  ends  with 

Vi 

T  t:A 
r  {t  +  s): A  . 

By  the  IH,  there  exists  a  derivation  Pj  of  F  =»  A  satisfying  the  lemma’s  conditions  for  the 
derivation  Pi.  Put  V'  to  be  Pj.  The  case  {Rr+)  can  be  treated  similarly. 

If  the  last  rule  in  P  is  (i?-),  then  the  deduction  ends  with 

Pi  P2 

F=»s:(A-)-B)  F=»t:A 
F  =>  (s  •  t) :  B 

By  the  IH,  there  exist  derivations  P^  of  F  A— and  Pj  of  F  =>•  A  satisfying  the  lemma’s 
conditions.  Take  the  derivation  P"  of  A,  F  B  from  the  inversion  lemma  7.3  and  combine 
the  new  derivation  P3 

P'  V>( 

r^A  A,F=j^B 
F,F=J>B 
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Using  the  contraction  {LC)  we  get  the  desired  derivation  of  F  B,  It  is  easy  to  check 
that  all  the  requirements  of  the  lemma  are  met. 

If  the  last  rule  in  V  is  (i?-),  then  V  is 


Vi 

r  A 
r  =>  c:A 


Let  D'  be  X>i. 

◄ 

Now  we  return  to  the  proof  of  theorem  7.1.  Our  strategy  will  consist  of  eliminating  the 
uppermost  cuts.  In  order  to  save  expositions  of  some  well  known  constructions  we  will  refer 
to  the  corresponding  steps  of  the  proof  of  the  cut  elimination  theorem  4.1.2  from  [45]  when 
convenient. 

7.5  Lemma.  Let  V  be  a  derivation  ending  in  a  cut 


Vi  X>2 

r=>A  A,r  B 

r,r'  =>  B 

such  that  V  contains  no  other  cuts.  Then  we  can  transform  V  into  a  derivation  of  the  same 
sequent  B  such  that  cutrank(V')<cutrank{'D)  =  max{rk{A,Vi),rk{A^I>2)}  without 

an  increase  of  the  ranks  of  the  formulas  from  F,  F',  B. 

Proof.  An  induction  on  the  rank  of  the  cut  rule,  with  a  subinduction  on  its  level.  There 
are  then  three  possibilities: 

1.  at  least  one  of  Pi,  P2  is  an  axiom  F,  F  P  or  ±,  F  F; 

2.  not  1.  and  the  cutformula  is  not  principal  in  at  least  one  of  the  premises; 

3.  not  1.  and  the  cutformula  is  principal  on  both  sides. 

Case  1.  Cut  can  be  eliminated  at  all  by  the  standard  reductions  ([45]). 

Case  2.  We  permute  the  cut  upward  in  a  stantard  way  (cf.[45])  without  changing  its  rank  as 
well  as  the  ranks  of  all  formulas  in  the  end  sequent  of  the  derivation,  until  we  find  ourselves 
in  situations  number  1  or  number  3. 

Case  3.  The  cutformula  is  principal  in  both  premises  and  neither  of  the  premises  an  axiom. 
The  induction  hypothesis  is  that  the  claim  of  lemma  has  been  shown  for  all  cuts  of  rank  less 
than  rk{A,V)  and  of  rank  equal  rA:(A,P),  but  level  less  than  the  one  of  the  given  cut.  The 
rules  corresponding  to  propositional  connectives  are  treated  in  a  usual  way  (cf.[45]).  There  is 
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one  additional  concern  here  compared  to  [45]:  we  have  to  make  sure  that  our  reductions  do 
not  increase  the  ranks  of  the  side  formulas  from  F,  For  example,  let  us  consider  the  case 
(R  — >•).  The  original  deduction  is 

'Do  Di 

r,A^B  r'=i^A 
T^A^B  T\A^B=i^C 

T,V' 

This  is  transformed  into 


Di  Vo 

r'  A  r,  A  =>  B  Dj 

T\T=^B  T',B^C 

r',r',r,  c 

We  have  eliminated  the  old  cut  but  have  got  two  new  cuts  instead,  both  having  lower  ranks. 
After  a  number  of  contractions  in  the  end  sequent  we  get  the  desired  derivation. 

The  new  cases  emerge  when  the  cutformula  is  of  the  form  t:F.  In  all  those  cases  the  right 
premise  is  just  introduced  by  (L:).  So,  we  distinguish  the  cases  by  their  left  premises. 

Case  {Rl).  The  derivation  is 

Vi  V2 

T  ^  t: A  t:A,r'  ^  C 

r  \t:t:A  \t:t:A,r^  C 

r,  r'  =!►  c 

This  is  transformed  into  a  derivation  with  a  lower  ranked  cut 

V\  V2 

T=>t:A  t:A,r^C  , 

r,  r'  =>►  c 

Case  (Re)  is  treated  is  a  similar  way. 

Case  {RI+)  (and  {Rr+)  by  a  similar  argument).  The  derivation 

Vi  V2 

r  =?>  t:A  A,r  C 

r  ^  (t  +  s) :  A  (i  +  s) :  A,  r  C 

r,r'  =»c 
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rk{A,V'^),  rk{B,V'^)  <  rk{A^B,V’o)  <  rk{s:{A-^B),Vo)  <  rk{{s  ■  t):B,V). 

The  transformed  derivation  in  this  case  will  be 

X»'  D" 

T^A  A,r^B 
T,r=^B 

r,r,r'=^>C' 

Again,  use  some  contractions  in  the  end  sequent  to  get  the  desired  derivation.  We  have 
eliminated  the  old  cut  and  have  created  two  new  ones  and,  may  be,  some  more  in  V'l  and  Vq 
as  a  result  of  the  m-reduction.  By  7.3  and  7.4  all  new  cuts  have  lower  rank. 

This  ends  the  proof  of  lemma  7.5. 

◄ 


B,T'  C 
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7.6  Lemma.  Let  a  derivation  V  contains  not  more  than  one  use  of  the  cut  rule.  Then  by  a 
finite  chain  of  reductions  it  can  be  transformed  into  a  cut-free  derivation  D'  of  the  same  end 
sequent  without  changing  the  ranks  of  the  formulas  from  the  end  sequent 

Proof.  An  induction  on  the  n  =cutrank{V).  The  base  case  n  =  0.  Then  V  is  already  cut- 
free.  The  induction  step.  Assume  n  >  0,  thus,  V  contains  a  cut.  Without  loss  of  generality 
assume  that  the  cute  rule  is  the  last  rule  in  V,  By  Lemma  7.5  transform  V  into  Vi  with 
cutrank{Vi)  <cutrank{V),  Beginning  with  the  uppermost  cuts  in  Vi  eliminate  them  all  by 
the  IH. 

◄ 

To  conclude  the  proof  of  Theorem  7.1  use  Lemma  7.6  to  eliminate  every  cut  in  a  given 
derivation  beginning  with  the  uppermost  ones. 


8  Natural  deduction  system  and  A-terms  for  Logic  of  Proofs 


8.1  Definition.  The  natural  deduction  system  CPM  for  CP  is  obtained  from  a  usual  natural 
deduction  system  for  propositional  logic  (cf.  [13],  [45])  in  the  language  of  CP  extended  by  the 
following  rules 


s:(A->B)  t:A 
(s-t):B 


(•/) 


t:A 

A 


(:E) 


t:A 

\t:t:A 


(!/) 


iA  (+/)  iA  (+7)  A  (ci) 

{t  +  s):A  {s  +  t):A  c:A 

where  A  is  an  axiom  of  the  Hilbert  version  of  CP  (Section  1),  c  is  a  proof  constant,  and  V 
is  the  standard  derivation  of  A.  Under  the  standard  derivation  of  A  we  mean  the  following. 
If  A  is  an  axiom  AO,  then  V  is  the  straightforward  normal  derivation  of  A  in  the  natural 
deduction  system  for  Int,  For  other  axioms  A1  -  A4  the  standard  derivations  are 

[s:{A^B)]  [t:A] 

[t:A]  {s‘t):B 

A  t:A—^{s  •t):B 

t :  A  — ^  A  s (A  — ^  JB)  — ^  (t !  A  — ^  (s  •  t) :  B) 
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[f-A] 


_M]_ 

{t+s):A 


t:A-^\t:t:A 


ti  A  — ^  i  A 


Note  that  a  standard  derivation  has  no  undischarged  premises.  Under  jCPAf  h  F  =^>  A  we 
mean  “A  is  derivable  in  CPAf  from  assumptions  F” . 

A  standard  theorem  relating  Hilbert,  Gentzen  and  natural  style  derivations  in  CP  holds. 
Namely  the  following  are  equivalent 

1.  F  l-£p  A 

2.  CPG\-T^  A 

3.  CPM  h  F  A. 

This  fact  is  established  by  the  standard  mutual  simulations  of  derivations  in  all  three  systems 
(cf.  section  3.3  in  [45]).  In  fact  for  any  source  derivation  of  size  s  the  simulation  runs  in 
polynomial  time  and  produces  a  derivation  of  size  0(s). 

The  following  analog  of  the  Lifting  lemma  1.2  holds  for  CPM. 

8.2  Corollary.  J/h  s:F,  A  =>■  A,  then  for  any  proof  variables  y  one  can  construct  a  proof 
polynomial  t{x,  y)  such  that  CRN"  h  s  :  F,  y  :  A  t{s,  y)  :  A.  Moreover,  F  =  0  then  the 
derivation  ofyiA  ^  t(^\A  contains  no  rules  other  than  (•/),  (c7)  or  {c^I). 

Proof.  Induction  of  the  depth  of  a  derivation.  A  straightforwrd  natural  deduction  version  of 
Lemma  1.2.  The  number  of  steps  in  the  algorithm  constructing  V'  is  bounded  by  a  polynomial 
of  the  length  of  V. 

◄ 


8.3  Definition.  Contractions  for  CPAf  include  all  usual  contractions  for  propositional  logic 
{A— ,y—,— ^-contractions,  permutation  contractions)  (cf.  section  6.1.3  in  [45]),  and  the  new 
contractions 

'-contraction 


Vi  V2 

s:{A-^B)  t:B 
(s  •t):B 

B 


transforms  into 


Vx  X>2 

s:{A-^B)  t:A 

~a~Tb  A~ 


B 
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+-contraction 


V 

transforms  into  -111 

A 

'.-contraction 


V 

transforms  into  t:A, 

c-contraction 


V 

transforms  into  A. 

An  obvious  new  permutational  contraction  should  also  be  added  that  allow  “pulling”  the  (:  E) 
upwards  through  the  (VE)  rule.  An  /TW’-derivation  T>  is  normal  if  no  contraction  is  possible 
anywhere  in  V. 

8.4  Theorem.  Normalization  holds  for  jCPAf 

Proof.  Given  a  derivation  V  in  CPAf  of  the  type  F  A  one  can  construct  a  normal 
derivation  V  of  the  same  type  F  A.  Indeed,  for  a  given  derivation  of  F  A  in  CPU 
one  can  construct  an  il!P^-derivation  of  a  sequent  F  ^  A.  By  5.11,  there  exists  a  cut-free 
/y^-derivation  of  F  =>  A.  A  usual  transformation  of  a  cut-free  ZTl^-derivation  into  an  CPM- 
derivation  produces  a  normal  >CPAA-derivation  (cf.  section  6.3  in  [45]).  Since  both  of  the 
transitions  from  £PAf  derivations  and  back  are  computable  (and  feasible) ,  the  entire  efficiency 
of  the  process  of  proof  normalization  in  CPU  in  this  proof  is  determined  by  an  efficiency  of 
normalization  of  proofs  in  CPQ.  An  easy  adaptation  of  a  constructive  normalization  theorem 
for  CPUi  independently  establishes  a  direct  algorithm  of  normalizing  derivations  in  CPU  as 
well. 


V 

A 

cTa 

A 


V 

t:A 

lt:t:A 

t:A 


V 

t:A 

(t  +  g):A 
A 


We  leave  the  description  of  a  direct  realization  algorithm  for  the  normal  deduction  system 
for  in  based  on  6.2  as  a  useful  exercise. 

8.5  Definition.  Under  CPMi  we  mean  an  intuitionistic  version  of  of  CPM  which  is  obtained 
from  CPN  by  omitting  the  double  negation  rule 

V 

1 

A 


8.6  Theorem.  (From  Gentzen  to  normal  deductions  in  the  intuitionistic  jCP) 

CPQi  H  r  A  if  and  only  if  jCPMi  f-  F  A. 

Moreover,  a  cut-free  derivation  in  CP&  transforms  into  a  normal  derivation  in  JCPMi. 

Proof.  A  usual  argument  in  the  style  of  Section  6.3  from  [45]. 

◄ 


8.7  Corollary.  Normalization  holds  for  JCPMi 

Proof.  Take  a  derivation  of  the  sort  F  A  in  jCPM,  transform  it  into  a  derivation  of 
F  =>  A  in  jCP&,  perform  a  cut  elimination,  and  transform  the  resulting  cut-free  proof  back 
into  an  jCPMi  derivation.  By  Theorem  8.6,  the  resulting  derivation  is  normal.  As  an  exercise 
one  could  write  down  a  direct  algorithm  of  normalization  of  derivations  in  jCPMi  that  will 
essentially  repeat  the  reduction  steps  for  cut  elimination  in  JCP&..  Moreover,  on  the  basis 
of  the  reductions  from  the  proof  of  Theorem  7.1  one  could  establish  a  strong  normalization 
property  of  j[P&,  and  JCPMi. 

◄ 


Extending  the  term  calculus  for  the  intuitionistic  logic  ([45])  we  can  identify  the  full  JCPMi 
with  a  system  of  typed  A-terms  in  a  natural  way. 

8.8  Definition.  We  define  a  A- term  calculus  jCPMiX  for  the  full  JCPMi.  The  language  of 
JCPMiX  has  only  formulas  of  the  type  t :  F  where  F  is  an  £P-formula,  and  t  is  a  term  built  from 
the  proof  variables  and  proof  constants  by  atomic  operations  p,  pj,  kj,  E^,  App,  P, 
U,  B,  Sj,  C,  (j=0,l),  and  A-abstraction.  The  arities  of  the  operations  will  be  made  clear  in 
the  rules.  The  first  eight  clauses  of  come  directly  from  the  term  calculus  for  Int  ([45],  2.2.2). 
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We  will  omit  an  obvious  description  of  free  and  bounded  variables.  As  usual,  [A]  denotes  a 
discharged  premise  A.  In  the  derivations  denoted  in  this  definition  by 

[u;:F] 


r-G 

the  variable  w  occurs  free  neither  in  F,  G  nor  in  any  undischarged  premise  of  the  derivation. 


t:± 


y:F 


(±Bt) 


s:A  t:B 
p{s,t):{AAB) 


{Alt) 


t:Ai 


k,(t):(AoVAi) 


j  G  {0, 1},  (V/f) 


[u:A] 


t:B 


(->•  It) 


Xu.ti  (^A.  — y 


q:s:{A^  B)  r:t:A 
P{q,  r):{s^t):B 


{■It) 


q:t:A 


B{q):\t:t:A 


(!(/) 


je{0,i},(AR) 


[« :A]  [v:  B] 


t:{A\/B)  s:C  s':C 
El,{t,s,s'):C 


{VEt) 


s ! {A  — ^  B)  ti A 

App{s,  t) :  B 


i-^Et) 


q:t:A 

U(,):A 


(:£() 


qitjiA 


Sj{q):{tQ  +  ti):A 


{+!) 
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Note  that  the  list  of  rules  above  suffices  to  build  a  A-term  p  without  free  variables  which 
internalize  in  jCPAfiX  the  standard  >C?Wi’-derivation  of  an  axiom  A.  In  particular,  JCPMiX  hp: 
A.  For  example,  the  A-term  version  of  the  standard  derivation  of  axiom  AS  is 


v:t:F 
B(v)  U:t:F 
Xv.B{v):{t:F-^\t:t :  F) 

The  last  rule  of  CPMiX  is 

V 

P  =  A  (c/t), 

C(p):c:A 

where  V  is  the  A-term  version  of  the  standard  derivation  of  A  in  CPAfi. 

8.9  Definition.  In  the  term  notation  the  contractions  for  the  jCPAfiX  are 

1-  Pi(p(^o,ti))  cont  tj  (je{0,l}), 

2-  cont  tj[x/t], 

3.  App{Xx.t^s)  cont  t[x/s]^ 

4.  U(B(t))  cont  t, 

5.  U(C(t))  cont  t, 

6.  U(P(to,ti))  cont  vlpp(U(to),U(ti)), 

7.  V{Sj{t))  cont  U(t), 

8.  f[E^^^^^{kjt,to,ti)]  cont  where  /  is  another  eliminating  oper¬ 

ator  (i,e.  one  of  py,  App,  U). 

The  contractions  1-5  are  the  called  detour  contractions,  6-8  are  permutation  contractions. 
A  A-term  t  is  normal  if  no  contractions  are  possible  in  t. 

It  follows  from  the  definitions  that 

jCPAfi  h  r  =?►  A  iff  OWiX  h  *:r  t{x):A  for  some  CRAfiX-term  t. 

8.10  Theorem.  (Normalization  of  £PjV?A-terms)  Every  X-term  for  jCPAfiX  is  normalizing. 
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Proof.  Translate  the  proof  of  theorem  8.4  from  the  language  of  derivations  into  the  language 
of  A-terms.  In  fact  one  can  establish  a  strong  normalization  of  £PA/zA>terms  with  respect  to 
the  contractions  8.9. 

◄ 


9  Abstraction  in  Logic  of  Proofs 

In  this  section  we  show  that  CP  provides  a  standard  provability  semantics  for  the  operator  of 
A-abstraction.  This  matches  our  earlier  observation  (Section  6),  that  <S4- modality  is  realized 
by  proof  polynomials.  Thus  modality  and  A-terms  are  objects  of  the  same  sort,  namely,  they 
are  all  proof  polynomials.  Through  a  realization  in  CP  both  modality  and  modal  lambda 
terms  receive  a  uniform  provability  semantics. 

The  defined  abstraction  operator  A*a;  on  proof  polynomials  below  is  a  natural  extension 
of  the  defined  A-abstraction  operator  \*x  in  combinatory  logic  (cf.  [45]). 

9.1  Definition.  An  £PA/t-derivation  V  is  pure  if  it  uses  no  rules  other  than  (■/),  (c/),  and 
a  closed  version  of  (!/)  where  the  principal  proof  polynomial  t  contains  no  variables.  It  is 
clear  that  every  pure  derivation  is  normal  since  it  has  no  elimination  rules. 


9.2  Lemma.  (Definable  abstraction)  Let  V  be  a  pure  CPNi-derivation  of  a  type 

p:T,  x:A  t{x):B 

such  that  X  does  not  occur  inp:T,A,B.  Then  one  may  construct  a  proof  polynomial  X*x.t{x) 
and  a  pure  CPAfi-derivation  V  of  the  type 

p-.r  ^  X*x.t{x):{A^B). 


Proof.  The  base  case  is  the  depth  of  V  equals  one.  There  are  two  possibilities. 

1.  V  is  t{x):B  and  t{x)  contains  an  occurrence  of  x.  Then  t{x):B  =  x:A.  Indeed,  by  the 
definition  of  a  natural  derivation  of  the  depth  1,  the  formula  t{x):B  should  occur  in  p:T,  x:A. 
Since  x  does  not  occur  in  p:T,A,B  the  only  remaining  possibility  is  when  t(x) :  B  coincides 
with  x:A.  Let  V  be  the  pure  derivation  (without  undischarged  premises)  of  (a-i-c) : (A A) 
where  a,  6,  c  are  proof  constants  specified  by  the  conditions  (cf.  [45],  section  1.3.6.) 

a :  ([A ->  (( A  ^  A)  ^  A)] -^  [( A  ^  ( A A) ) -^  ( A A)]) 

6:[A-^((A->A)^A)] 
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Let  \*x.x  =  (o  •  6  •  c). 

2.  V  is  t:B  and  t  does  not  contain  an  occurrence  of  x.  Then  t:B  £  piT.  Let  V  be 

A^B 

b:{B^{A^B))  t:B 

{b-t):{A^B) 

Let  X*x.t  =  b  -  t. 

The  induction  step  corresponding  to  the  closed  (!7)  rule  is  treated  similarly  to  the  case  2. 
Consider  the  case  (•/).  Let  a  derivation  V  from  the  premises  p:T,x:A  end  with 

s:(y->B)  t:Y 
{s-t):B  ■ 

By  the  IH,  we  have  already  built  pure  derivations  from  the  premises  p:T  of  A*x.s:(A^(y -4 
B))  and  A*x.t:(A-4y).  From  them  we  construct  a  pure  derivation 

(A->(y-4B))-^((A-4y)-^(A^B)) 
c:  ((A-^  (y-)-B))  -4  ((A^y)  -)■  {A^B)))  \*x.s:{A-¥  {Y^B)) 

(c-A*a:.s):((A-)-y)->(A-^B))  X*x.t:{A^Y) 

(c  •  A*a;.s  •  X*x.t) :  (A-4B) 

where  Vi  is  the  standard  derivation  of  a  propositional  axiom.  Let  X*x.{s-t)  =  (c-A*a:.S‘A*a:.t). 


9.3  Comment.  In  CPMi  A-abstraction  is  presented  by  a  set  of  proof  polynomials  depending 
on  a  context  (e.g.  an  >C?Wi’-derivation) .  In  this  respect  the  realization  from  9.2  of  A-abstraction 
by  proof  polynomials  is  similar  the  realization  of  «Sl-modality  which  is  decomposed  in  6.2  into 
a  set  of  proof  polynomials  depending  on  a  context  (there  an  «SIrderivation). 

The  operation  A*  suffices  to  emulate  the  traAitional  A-abstraction.  In  fact  it  cannot  be 
easily  extended  from  the  pure  to  more  general  derivations  without  sacrificing  some  desired 
properties.  We  need  to  keep  the  format  p:T,x:  A  ^  t{x) :  B  throughout  all  the  derivation 
V  in  order  to  preserve  an  inductive  character  of  the  definition.  The  restriction  “x  does  not 
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occur  in  p:T,A,B"  is  needed  to  guarantee  the  correctness  of  /9-conversion  for  A*-abstraction 
(below),  though  it  rules  out  (!7).  Note,  that  the  rule  (!7)  does  not  admit  abstraction  anyway. 
Indeed,  in  jCPAf  we  have 

x:A  \x:xiA, 


but  for  no  proof  polynomial  p 


since  A->a;:A  is  not  provable  in  CP. 


^  p:{A—^x:A) 


9.4  Definition.  The  dual  operation  to  A-abstraction  is  I3 -conversion 

{Xx^.t^)s^  -^0  t^[x^/s^]. 

/^-conversion  is  naturally  presented  as  the  following  transformation  of  pure  derivations  in 

CPM: 


[x:A] 

t{x):B  ^  transforms  into 

X*xt{x):{A-^B)  ®  =  ^ 

(A*xi(a;)  •  s):B 

The  rule  of  rj-conversion 

{\x'^.t^)s^  — t  if  X  is  not  free  in  t 

is  treated  in  the  same  way.  Finally,  a-conversion  corresponds  to  an  obviously  valid  rule  of 
renaming  bounded  variables  in  /TWi-derivations  with  abstraction. 

All  other  standard  A-term  constructors  for  Int  can  also  be  realized  as  operations  on  proof 
polynomials.  This  is  a  straightforward  corollary  of  the  fact  that  Int  is  a  fragment  of  CPAfi 
and  of  the  Lifting  rule  for  CPAfi.  Indeed,  if  CPAfi  h  F  5,  then  by  induction  on  the  given 
proof  one  can  construct  a  proof  polynomial  p{y)  such  that  CPAf  h  yiF  ^  :B.  However, 

for  the  sake  of  clear  presentation  of  A-terms  as  proof  polynomials  we  will  explicitly  build  the 
proof  polynomials  corresponding  to  standard  A-terms  constructors. 

9.5  Definition.  We  define  a  list  of  standard  translations  of  term  constructors  from  CPMiX 
to  corresponding  derivations  in  CPNi. 

\-term  constructor  corresponding  derivation  in  CPNi 


V 

s:A 

t{s):B, 
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y:F 

s:A  t:B 
p{s,t):{AAB) 

t:Ai 

- - - j  e  {0, 

k,(0:(AoVAi) 

[u :  A]  [u :  B] 

t:{AyB)  s:C  s':C 
El,{t,s,s'):C 


y:F 

V 

c:{A-^  {B AAB))  s-.j 

{c- s)'.{B -¥  AaB)  t'.B 
[c-  s  -  t):  (AaB) 

V 

c:(AoAAi ->■  Aj)  t:'(AoAAi) 
{c-t):Aj 

V 

f  c;(Aj  — ^  AqVAx)  t'.Aj 

(c-0:(>loVAi) 

2?1  I>2 

(c-A*«.s):((B^C')^(AVB^C))  D3 
'  {c  -  X*u.s  ■  \*v.s'):{A\J B^C) 

(c  •  X*u.s  •  X*v.s'  •t):C 


where  X>i  is 


X>2  and  Vz  are 


V 

c:((A-4C)^((S^C)^(AVfi^C'))) 


[u\A] 


[v:B] 


s:C 

\*u.s:{A^C) 


s':C 

\*v.s' -.{B  ^  C) 


U{A\/B) 
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[«:A] 

[u:A\ 

t:B 

t:B 

Xu.t:{A  — >  B) 

X*u.t:{A^B) 

s  1  — y  t ! 

lA  5 1  (A — ^  B)  tiA 

App{s,  t):B 

{s-t):B 

t:± 

V 

c:(±->’A)  t:± 

Ei{t):A 

{s-t):A 

c:  {s: 

V 

{A-^B)-^{t:A-¥{s  •t):B))  u:s:{A-^B) 

u:s:{A—^B)  v:t:A 

{c-u):{t:A—^{s-t):B)  v:t:A 

P(«,  v):{s-t):B 

(c  •  u  •  v):{s  •  t):B 

v:t:A 

V 

c:{t:A-^A)  v:t:A 

V{v):A 

(c-v):A 

v:t:A 

V 

c:{t-.A-¥\t‘.t'.A)  v:t:A 

{c '  v):\t:t:A 

v’.ti'.A 

3  €  {0, 1} 

V 

c:{tj:A—^{to  +  ti):A)  vitjiA 

Sj(v):(fo  +  ^i):A 

{c-v):{to  +  ti):A 
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d:  (c:  A->’(A->c:  A)) 

(<i-!c) :  (A— f  c:  A) 


Vx 
c:  A 


V 

{cit) 

C(p)  :c:  A 


!c:c:  A 


(d-  !c  •  :  A 


^:A 


In  each  case  V  denotes  a  corresponding  standard  £PA/?-derivation  with  the  end  rule  {cl). 


9*6  Theorem.  (Realization  of  CPNiX  into  jCPAfi)  Under  standard  translations  from  9.5  an 
CRXfiX-derivation  x:r  i(x)  :A  becomes  a  pure  derivation  x:T^  V{x):A^  in  the  CPNi- 

Proof.  A  straightforward  induction  on  an  £/Wi*A-derivation  £ :  F  ^(x)  :  A.  It  is  imme¬ 
diate  from  definition  9.5  and  lemma  9.2  that  each  standard  transformation  returns  a  pure 
derivation. 

◄ 


9.7  Corollary.  (Realization  of  A-calculus  for  Xnt  into  CPAfi)  Let  V  be  a  X-term  derivation  of 
the  type  xiF  t{x):A  in  the  term  calculus  for  Int.  Standard  translations  define  an  effective 
step  by  step  realization  ofV  as  a  derivation  V'  of  x:T  t^{x):A  in  the  CPMi. 


9.8  Comment.  As  it  is  easy  to  see  that  CPAfiX  (as  well  as  A-calculus  for  Int)  can  be  realized 
in  a  small  fragment  of  JCPAfi  consisting  of  pure  derivations  only. 

We  already  have  enough  ingredients  to  demonstrate  that  the  Logic  of  Proofs  can  emulate 
not  only  classical  modal  logic,  but  also  modal  A-calculi. 

Under  IS4a  we  mean  the  intuitionistic  modal  logic  on  the  basis  of  <S4,  introduced  in  [7]  (cf. 
also  [26],  [38]).  An  inspection  of  the  proof  of  theorem  6.2  (realization  of  modal  logic),  shows 
that  this  theorem  holds  also  for  JCP  instead  of  jCP  and  IS4a  instead  of  Si.  In  other  words, 
the  intuitionistic  logic  of  proofs  is  an  explicit  version  of  IS4a  in  the  same  sense  that  jCP  is 
an  explicit  version  of  Si.  We  will  show  how  JCP&  naturally  emulates  the  modal  A-calculus  for 
IS4a  and  thus  supplies  modal  A-terms  with  standard  provability  semantics. 

9.9  Theorem.  (Realization  of  modal  A-calculus).  There  is  an  effective  step  by  step  realiza- 
tion  of  any  derivation  x:T  ^  t{x):A  in  the  X-term  calculus  for  IS4a  as  a  derivation  of 
x:T^  t^{x):A^  in  jCPAfi. 
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Proof.  As  above  all  the  usual  steps  of  A-terms  formation  can  be  emulated  in  the  Logic  of 
Proofs  (here  in  CPNi) .  The  entire  term  assignment  system  for  IS4a  is  obtained  from  the  usual 
one  for  intuitionistic  logic  by  adding  two  new  rules  that  correspond  to  “modal”  operations  on 
A-terms  “box”  and  “unbox”: 


A  Si :  OAi 


A  Ski^Ak  xi:nAi,...^Xk:^Ak  =>  t{x):B 


A  box(^(^):n5 


(□/) 


and 

r  ^  t:DA 
r  ^  unbox (^)  :A 

Let  p :  r  ^ :  A  be  a  modal  A  term,  and  let  7?  be  a  natural  derivation  of  A  from  the 
hypothesis  F,  which  is  represented  by  this  A-term.  The  construction  of  the  desired  realization 
r  takes  two  rounds.  First,  we  realize  all  the  occurrences  of  □  in  the  derivation  V  of  B  from 
Ai,...,An  by  proof  polynomials  according  to  the  algorithm  from  6.2.  As  a  result,  we  get 
a  realization  *  of  modalities  in  V  such  that  CPAfi  h  S*  F*  holds  for  every  intermediate 
derivation  E  F  in  P.  The  second  round  produces  the  desired  realization  r  and  proceeds  by 
an  induction  on  the  steps  of  the  A-term  construction  (i.e.  on  the  construction  of  V).  Without 
loss  of  generality  we  assume,  that  the  proof  variables  used  in  the  first  round  for  *  are  all 
different  from  the  ones  we  use  in  the  second  round. 

At  the  nodes  of  V  corresponding  to  intuitionistic  connectives  use  standard  translations 
from  9.5.  At  a  (□/)  node  perform  a  natural  deduction  step  is  performed: 


A  =>  OAi  A  ^  OAfc  DAi, . . .,  ^Ak  =>  B 
A=>  OB 


The  corresponding  step  of  the  modal  A-term  assigning  process  is 

u:A  si[u):  nAi  ...  u:  A  =>  Sk{u) : OAjt  xi :  DAi, . . . ,  Xjt :  ^A^  ^(x)  :B 

u:A^  hox{t){s{u)):nB 


By  the  construction  of  * 

for  some  proof  polynomials  /i, . . . ,  /fe-  Also  by  the  construction  of  *  from  6.2  we  may  assume, 
that  the  variables  yi, . . . ,  y^  do  not  occur  in  AJ, . . . ,  A^.  By  Lifting,  find  a  proof  polynomial 
such  that 

yi:Al,  ...,  yk-Al^p{y):B*{^. 
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By  the  substitution  [y/ ^  from  the  latter  derivation  we  get 

A: At,  fk'.Al  =>  p{f):B*{f). 

And  by  the  induction  hypothesis, 

u:A*  s{{u):fi:Ai,  ...,  u:A*  sl{u):fk:Al, 
By  Lifting  (corollary  8.2),,  construct  a  proof  polynomial  ^(x)  such  that 

xi:fi:A^,...,Xk:fk:Al  =»  g{x)ip{f):B*{f), 

by  substitution, 

sj :  A :  At, . . . ,  sj :  A :  At  :p{f) : B*{f) , 

and,  by  the  transitivity  of  , 

ft: A*  g{^{u)):p{f):B*{f). 

Let  (box(t))'’  =  g{^{u)). 

At  a  (□£^)-node  of  T>  we  have  a  figure 

«:r  ^  Ati) :OA 

J 

miF  unbox(t)(w) : A 


which  corresponds  to  a  natural  deduction  step  from  F  DA  to  F  ^  A.  By  the  realization  * 
we  have  F*  ^  A*.  Use  the  standard  transformation  (:  E)  from  9.5.  to  construct  h{x)  and  a 
pure  proof 

i?:F*  h{u):A*. 


Put  (unbox(t))’'  =  h. 

•4 


10  Conclusions 

In  this  paper  we  concentrated  on  internal  semantical  and  structural  questions  of  CP  and  on 
building  a  decent  realization  of  modal  logic  and  A-calculi  in  CP.  We  have  not  addressed  yet 
such  an  appealing  issue  as  rewriting  the  entire  CP  in  a  pure  A  way  without  proof  constants 
but  with  extra  operations  on  terms.  In  a  way  such  a  presentation  of  CP  would  correspond 
to  a  transition  from  the  a  combinatory  system  to  a  A-style  system.  From  the  logical  point 
of  view  this  would  mean  a  transliteration  of  proof  terms  from  the  Hilbert  style  basis  to  the 
natural  deduction  basis. 
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The  Logic  of  Proofs  has  has  a  solid  provability  semantics  and  a  more  expressive  language 
than  either  modal  logic  or  the  A-calculus.  The  ability  of  the  Logic  of  Proofs  to  emulate 
both  modal  logic  and  A-calculus  comes  at  some  price.  Modal  logic  and  traditional  A-calculi 
cover  only  fractions  of  CP  but  instead  enjoy  nice  symmetries,  transparent  models,  normal 
forms,  etc.  Modal  and  A  presentations  of  the  same  facts  are  usually  more  compact  than  the 
corresponding  presentations  via  proof  polynomials.  Modality  and  A’s  may  be  regarded  as 
higher  level  languages  for  corresponding  fragments  of  Logic  of  Proofs. 

Proof  polynomials  reveal  the  dynamic  character  of  modality.  The  realization  of  in 
provides  a  fresh  look  at  modal  logic  and  its  applications  in  general.  Such  areas  as  modal 
A-calculi,  polymorphic  second  order  A-calculi,  A-calculi  with  types  depending  on  terms,  non- 
deterministic  A-calculi,  etc.,  could  gain  from  their  semantics  as  proof  polynomials  delivered 
hy  CP. 

Logic  of  Proofs  for  the  second  order  arithmetic  naturally  requires  quantifiers  over  proposi¬ 
tions.  Such  a  logic  should  accomodate  second  order  polymorphic  A-calculi  (cf.  [15],  [32],  and 
supply  them  with  provability  semantics. 
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